{"id":"CVE-2025-21791","revision":"08e1fd945a9b4322856e0dfef1892008","records":[{"revision":"08e1fd945a9b4322856e0dfef1892008","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-21791","aliases":[],"title":"vrf: use RCU protection in l3mdev_l3_out()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvrf: use RCU protection in l3mdev_l3_out()\n\nl3mdev_l3_out() can be called without RCU being held:\n\nraw_sendmsg()\n ip_push_pending_frames()\n  ip_send_skb()\n   ip_local_out()\n    __ip_local_out()\n     l3mdev_ip_out()\n\nAdd rcu_read_lock() / rcu_read_unlock() pair to avoid\na potential UAF.","state":0,"publishedAt":"2025-02-27T02:18:29.014+00:00","modifiedAt":"2026-10-15T01:04:25.82+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"include/net/l3mdev.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"20a3489b396764cc9376e32a9172bee26a89dc3b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"5bb4228c32261d06e4fbece37ec3828bcc005b6b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"c7574740be8ce68a57d0aece24987b9be2114c3c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"c40cb5c03e37552d6eff963187109e2c3f78ef6f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"022cac1c693add610ae76ede03adf4d9d5a2cf21\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"7b81425b517accefd46bee854d94954f5c57e019\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a8e3e1a9f02094145580ea7920c6a1d9aabd5539\",\n                            \"lessThan\": \"6d0ce46a93135d96b7fa075a94a88fe0da8e8773\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"include/net/l3mdev.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.9\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.9\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.291\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.235\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.179\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.129\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.79\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.16\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13.4\",\n                            \"lessThanOrEqual\": \"6.13.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e","https://git.kernel.org/stable/c/20a3489b396764cc9376e32a9172bee26a89dc3b","https://git.kernel.org/stable/c/5bb4228c32261d06e4fbece37ec3828bcc005b6b","https://git.kernel.org/stable/c/c7574740be8ce68a57d0aece24987b9be2114c3c","https://git.kernel.org/stable/c/c40cb5c03e37552d6eff963187109e2c3f78ef6f","https://git.kernel.org/stable/c/022cac1c693add610ae76ede03adf4d9d5a2cf21","https://git.kernel.org/stable/c/7b81425b517accefd46bee854d94954f5c57e019","https://git.kernel.org/stable/c/6d0ce46a93135d96b7fa075a94a88fe0da8e8773"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-21791","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-21791","identifiers":["CVE-2025-21791"]},"retained":false,"historicalAffected":[]}],"coverage":[]}