CVE-2025-21765

In the Linux kernel, the following vulnerability has been resolved:

ipv6: use RCU protection in ip6_default_advmss()

ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.

This vulnerability is rated with a Moderate impact for Red Hat Enterprise Linux because the attack vector is limited to local authenticated users and the primary consequence is a system crash. An attacker with local access could trigger a race condition in the IPv6 networking subsystem during network namespace deletion, causing an invalid memory dereference. Because the issue cannot be exploited remotely and does not lead to privilege escalation or data confidentiality loss, it does not warrant an Important severity rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.