01 Record

CVE-2025-21765

ipv6: use RCU protection in ip6_default_advmss()

HighPUBLISHEDCNA: Linux

CNA base score8.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ipv6: use RCU protection in ip6_default_advmss()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.60% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 46.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 02:18Z1 YR AGO

Last updated

2026-08-05 11:54Z1 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.1)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-414Missing Lock CheckBase

Data version

5.2

Document digest

b556b6e6730922a08db97289eb165b8f0a5f363a2fad0b0eb106be10f29dfea1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 78ad057472d8c76e0602402269222f9f9c698790, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < d02f30d220ef9511568a48dba8a9004c65f8d904, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 28de355b63ad42309ed5a03ee7c436c90512265b, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 84212387caadb211cd9dadd6fd5563bd37dc1f5e, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 4176a68b0db8fc74ac14fcd00ba8231371051dc2, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 713a40c892f40300d63691d9f85b2a23b48fe1e8, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 550ed693f47370502a71b85382e7f9e6417300b8, 5578689a4e3c04f2d43ea39736fd3fa396d80c6e to < 3c8ffcd248da34fc41e52a46e51505900115fc2a, 2.6.26—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/78ad057472d8c76e0602402269222f9f9c698790
git.kernel.orghttps://git.kernel.org/stable/c/d02f30d220ef9511568a48dba8a9004c65f8d904
git.kernel.orghttps://git.kernel.org/stable/c/28de355b63ad42309ed5a03ee7c436c90512265b
git.kernel.orghttps://git.kernel.org/stable/c/84212387caadb211cd9dadd6fd5563bd37dc1f5e
git.kernel.orghttps://git.kernel.org/stable/c/4176a68b0db8fc74ac14fcd00ba8231371051dc2
git.kernel.orghttps://git.kernel.org/stable/c/713a40c892f40300d63691d9f85b2a23b48fe1e8
git.kernel.orghttps://git.kernel.org/stable/c/550ed693f47370502a71b85382e7f9e6417300b8
git.kernel.orghttps://git.kernel.org/stable/c/3c8ffcd248da34fc41e52a46e51505900115fc2a
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2025-21765

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21765

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References