Azure Linux 3.0 Security Update: kernel (CVE-2025-21652)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21652 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in...

CVE-2025-21652: Use After Free

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlangetiflink. syzbot presented an use-after-free report 0 regarding ipvlan and linkwatch. ipvlan does not hold a refcnt of the lower device unlike vlan and macvlan. If the linkwatch work is...