CVE-2025-21719

A flaw was found in the Linux kernel's IP multicast routing (ipmr) component. A local user can exploit this vulnerability by querying multicast routing tables that contain unresolved entries. This causes the kernel to perform an invalid memory access, leading to a system crash and a Denial of Service (DoS).

This flaw is rated as Low severity because successful exploitation requires specific timing conditions where unresolved multicast entries are present during routing table queries by an authenticated local user. While an attacker on the local system could trigger a kernel panic leading to denial of service, multicast routing is not active in default Red Hat Enterprise Linux installations. Furthermore, exploitation does not lead to privilege escalation or compromise data confidentiality and integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.