CVE-2025-21791 vrf: use RCU protection in l3mdev_l3_out()

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdevl3out l3mdevl3out can be called without RCU being held: rawsendmsg ippushpendingframes ipsendskb iplocalout iplocalout l3mdevipout Add rcureadlock / rcureadunlock pair to avoid a potential UAF...

CVE-2025-21764

The CVE-2025-21764 issue affects the Linux kernel: ndisc_alloc_skb() could be invoked without RTNL or RCU held, enabling a potential use-after-free. The published fixes add RCU protection to ndisc_alloc_skb() to prevent UAF. Affected advisories (e.g., kernel security updates in Astra Linux, ALAS/...

CVE-2024-35862

A use-after-free flaw was found in the Linux kernel in smb smb2isnetworknamedeleted when exiting a session. This flaw allows a local attacker to crash the system...