In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed.
Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dtb-lg | May 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1035-nvidia-lowlatency | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub