CVE-2025-21762

In the Linux kernel, the following vulnerability has been resolved:

arp: use RCU protection in arp_xmit()

arp_xmit() can be called without RTNL or RCU protection.

Use RCU protection to avoid potential UAF.

Although this issue has been resolved in the upstream Linux kernel as stated in the initial description inherited by CVE.org, it is still present in Red Hat Enterprise Linux kernel versions prior to 10.1 and is currently not scheduled to be patched due to it's lower severity rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.