In the Linux kernel, the following vulnerability has been resolved:
net/ip6_tunnel: Prevent perpetual tunnel growth
Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd ("net: ip_tunnel: prevent perpetual headroom growth"), ipv6 tunnel yet increases the headroom without any ceiling.
Reflect ipv4 tunnel headroom adjustment limit on ipv6 version.
Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.196-137.219Upgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.247-246.989Upgrade kernel-livepatch-5.10.245-241.976Upgrade kernel-livepatch-4.14.355-280.713Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel6.12-toolsUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.1.158-178.288Upgrade kernel-libbpfUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.12.55-74.119Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-develUpgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade bpftool6.12Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12-debuginfoUpgrade perfUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12 | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 14, 2025 | Nov 14, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Nov 12, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 12, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracleUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-6.17Upgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-170-genericUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.17Upgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-gcp-6.17Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-6.17Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-170-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.17Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-fipsUpgrade linux-image-virtual-6.17Upgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-6.17Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64k | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub