In the Linux kernel, the following vulnerability has been resolved:
ipv6: release nexthop on device removal
The CI is hitting some aperiodic hangup at device removal time in the pmtu.sh self-test:
unregister_netdevice: waiting for veth_A-R1 to become free. Usage count = 6 ref_tracker: veth_A-R1@ffff888013df15d8 has 1/5 users at dst_init+0x84/0x4a0 dst_alloc+0x97/0x150 ip6_dst_alloc+0x23/0x90 ip6_rt_pcpu_alloc+0x1e6/0x520 ip6_pol_route+0x56f/0x840 fib6_rule_lookup+0x334/0x630 ip6_route_output_flags+0x259/0x480 ip6_dst_lookup_tail.constprop.0+0x5c2/0x940 ip6_dst_lookup_flow+0x88/0x190 udp_tunnel6_dst_lookup+0x2a7/0x4c0 vxlan_xmit_one+0xbde/0x4a50 [vxlan] vxlan_xmit+0x9ad/0xf20 [vxlan] dev_hard_start_xmit+0x10e/0x360 __dev_queue_xmit+0xf95/0x18c0 arp_solicit+0x4a2/0xe00 neigh_probe+0xaa/0xf0
While the first suspect is the dst_cache, explicitly tracking the dst owing the last device reference via probes proved such dst is held by the nexthop in the originating fib6_info.
Similar to commit f5b51fe804ec ("ipv6: route: purge exception on removal"), we need to explicitly release the originating fib info when disconnecting a to-be-removed device from a live ipv6 dst: move the fib6_info cleanup into ip6_dst_ifdown().
Tested running:
./pmtu.sh cleanup_ipv6_exception
in a tight loop for more than 400 iterations with no spat, running an unpatched kernel I observed a splat every ~10 iterations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftoolUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | May 30, 2025 | Dec 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel | Feb 17, 2025 | Dec 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Apr 11, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Mar 19, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Apr 1, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-ibmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-awsUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04 | Feb 20, 2025 | Dec 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub