In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed.
Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-zfcpdump | May 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-generic | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub