In the Linux kernel, the following vulnerability has been resolved:
ipv6: release nexthop on device removal
The CI is hitting some aperiodic hangup at device removal time in the pmtu.sh self-test:
unregister_netdevice: waiting for veth_A-R1 to become free. Usage count = 6 ref_tracker: veth_A-R1@ffff888013df15d8 has 1/5 users at dst_init+0x84/0x4a0 dst_alloc+0x97/0x150 ip6_dst_alloc+0x23/0x90 ip6_rt_pcpu_alloc+0x1e6/0x520 ip6_pol_route+0x56f/0x840 fib6_rule_lookup+0x334/0x630 ip6_route_output_flags+0x259/0x480 ip6_dst_lookup_tail.constprop.0+0x5c2/0x940 ip6_dst_lookup_flow+0x88/0x190 udp_tunnel6_dst_lookup+0x2a7/0x4c0 vxlan_xmit_one+0xbde/0x4a50 [vxlan] vxlan_xmit+0x9ad/0xf20 [vxlan] dev_hard_start_xmit+0x10e/0x360 __dev_queue_xmit+0xf95/0x18c0 arp_solicit+0x4a2/0xe00 neigh_probe+0xaa/0xf0
While the first suspect is the dst_cache, explicitly tracking the dst owing the last device reference via probes proved such dst is held by the nexthop in the originating fib6_info.
Similar to commit f5b51fe804ec ("ipv6: route: purge exception on removal"), we need to explicitly release the originating fib info when disconnecting a to-be-removed device from a live ipv6 dst: move the fib6_info cleanup into ip6_dst_ifdown().
Tested running:
./pmtu.sh cleanup_ipv6_exception
in a tight loop for more than 400 iterations with no spat, running an unpatched kernel I observed a splat every ~10 iterations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.184-125.190Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfo | May 30, 2025 | Dec 29, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra | Feb 17, 2025 | Dec 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Apr 11, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Mar 19, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Apr 1, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-raspiUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-intel-iotgUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-awsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-virtual | Feb 20, 2025 | Dec 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub