In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndiscallocskb()
ndiscallocskb() can be called without RTNL or RCU being held.
Add RCU protection to avoid possible UAF.
[
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-117a858e",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-1819affc",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-239ba4d0",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-3cc2a2cf",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-41456b0b",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-4242ea4c",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@628e6d18930bbd21f2d4562228afe27694f66da9",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-4ed1fbd3",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-5604b329",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-83167654",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-9d594313",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-b0184be1",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-bd531bee",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-e56a0413",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "id": "CVE-2025-21764-ec7e2639",
        "digest": {
            "length": 545.0,
            "function_hash": "275331024954922374073706739064078015228"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
        "target": {
            "function": "ndisc_alloc_skb",
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-f4ec94c9",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    },
    {
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "id": "CVE-2025-21764-fd666be2",
        "digest": {
            "line_hashes": [
                "73922751308198343866279670324361891447",
                "103244140727611276382773853111594128657",
                "30306955002580348497269526637008120849",
                "139881418032576774093044632846289250922",
                "156181769472356246350431684190272210957",
                "315080421584632456164942499114552440160",
                "262259250053213402574290376522264563767",
                "4033169643768191632796068313754242992",
                "259732931259591523227021162677980692034",
                "335090661129067462406323167145634031258",
                "23410106732019169757276389268647567863",
                "340204372785792581149380490638005714609",
                "175293853215896871989097666175916152860",
                "214491631257691543385829021759505416272",
                "27350803966552281516505280967784555176"
            ],
            "threshold": 0.9
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@628e6d18930bbd21f2d4562228afe27694f66da9",
        "target": {
            "file": "net/ipv6/ndisc.c"
        }
    }
]