In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed.
Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt-devel | May 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1035-nvidia-lowlatency | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub