In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed.
Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-symsUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kb | May 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fde-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-78-lowlatency | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub