In the Linux kernel, the following vulnerability has been resolved:
net: Fix icmp host relookup triggering ip_rt_bug
arp link failure may trigger ip_rt_bug while xfrm enabled, call trace is:
WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 ip_rt_bug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc6-00077-g2e1b3cc9d7f7 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:ip_rt_bug+0x14/0x20 Call Trace: <IRQ> ip_send_skb+0x14/0x40 __icmp_send+0x42d/0x6a0 ipv4_link_failure+0xe2/0x1d0 arp_error_report+0x3c/0x50 neigh_invalidate+0x8d/0x100 neigh_timer_handler+0x2e1/0x330 call_timer_fn+0x21/0x120 __run_timer_base.part.0+0x1c9/0x270 run_timer_softirq+0x4c/0x80 handle_softirqs+0xac/0x280 irq_exit_rcu+0x62/0x80 sysvec_apic_timer_interrupt+0x77/0x90
The script below reproduces this scenario: ip xfrm policy add src 0.0.0.0/0 dst 0.0.0.0/0 \ dir out priority 0 ptype main flag localok icmp ip l a veth1 type veth ip a a 192.168.141.111/24 dev veth0 ip l s veth0 up ping 192.168.141.155 -c 1
icmp_route_lookup() create input routes for locally generated packets while xfrm relookup ICMP traffic.Then it will set input route (dst->out = ip_rt_bug) to skb for DESTUNREACH.
For ICMP err triggered by locally generated packets, dst->dev of output route is loopback. Generally, xfrm relookup verification is not required on loopback interfaces (net.ipv4.conf.lo.disable_xfrm = 1).
Skip icmp relookup for locally generated packets to fix it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Mar 18, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Apr 1, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-24.04 | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 3, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub