Security tracker / CVE-2025-21758

CVE-2025-21758

ipv6: mcast: add RCU protection to mld_newpack()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in b8ad0cbc58f7 ("[NETNS][IPV6] mcast - handle several network
 carnil> namespace"). Vulnerable versions: 2.6.26-rc1.

Bugs

Status

Branch	Status
upstream	released (6.14-rc3) [a527750d877fd334de87eef81f1cb5f0f0ca3373]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.4) [d60d493b0e65647e0335e6a7c4547abcea7df8e9]
6.12-upstream-stable	released (6.12.16) [25195f9d5ffcc8079ad743a50c0409dbdc48d98a]
6.6-upstream-stable	released (6.6.79) [1b91c597b0214b1b462eb627ec02658c944623f2]
6.1-upstream-stable	released (6.1.129) [e8af3632a7f2da83e27b083f787bced1faba00b1]
5.10-upstream-stable	needed
sid	released (6.12.16-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.129-1)
5.10-bullseye-security	needed