SECUFOCUSNOW
Home›CVE index›CVE-2025-21764
Review reviewHigh

CVE-2025-21764

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

CVSS
7.8
EPSS
0.26%
17.3% percentile
CISA KEV
Not listed
Published
2025.02.27
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.26%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
Affected versions
>= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < 96fc896d0e5b37c12808df797397fb16f3080879, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < b870256dd2a5648d5ed2f22316b3ac29a7e5ed63, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < 3c2d705f5adf5d860aaef90cb4211c0fde2ba66d, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < 9e0ec817eb41a55327a46cd3ce331a9868d60304, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < bbec88e4108e8d6fb468d3817fa652140a44ff28, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < cd1065f92eb7ff21b9ba5308a86f33d1670bf926, >= de09334b9326632bbf1a74bfd8b01866cbbf2f61 < 628e6d18930bbd21f2d4562228afe27694f66da9, >= 3.9, >= V3.1.6, >= 3.9 < 5.4.291, >= 5.5 < 5.10.235, >= 5.11 < 5.15.179, >= 5.16 < 6.1.129, >= 6.2 < 6.6.79, >= 6.7 < 6.12.16, >= 6.13 < 6.13.4, 6.14
Fixed versions
5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.79, 6.12.16, 6.13.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416
CVE-2025-21764 — Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | SECUFOCUS NOW