In the Linux kernel, the following vulnerability has been resolved:
ipv6/addrconf: fix a potential refcount underflow for idev
Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout.
There is a time gap in [1], during which if the pending rs_timer becomes not pending. It will miss to hold idev, but the rs_timer is activated. Thus rs_timer callback function addrconf_rs_timer() will be executed and put idev later without holding idev. A refcount underflow issue for idev can be caused by this.
if (!timer_pending(&idev->rs_timer)) in6_dev_hold(idev); <--------------[1] mod_timer(&idev->rs_timer, jiffies + when);
To fix the issue, hold idev if mod_timer() return 0.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-5.10.192-182.736Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.122-77.145Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Sep 30, 2025 | Sep 15, 2025 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-raspi-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-gkeUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-oracle-5.15Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub