In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails.
Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6_nh") moved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init() but forgot to add cleanup for fib6_nh->nh_common.nhc_pcpu_rth_output in case it fails to allocate fib6_nh->rt6i_pcpu, resulting in memleak.
Let's call fib_nh_common_release() and clear nhc_pcpu_rth_output in the error path.
Note that we can remove the fib6_nh_release() call in nh_create_ipv6() later in net-next.git.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.180-122.191Upgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-devel | Jun 23, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.132-147.221Upgrade bpftool-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perfUpgrade kernel-livepatch-6.12.22-27.96Upgrade python3-perfUpgrade kernel-headersUpgrade perf6.12Upgrade kernel6.12 | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jul 21, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jul 1, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-mediatek | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-oemUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-fipsUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1091-azureUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-azure-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-azure-fde-edgeUpgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-5.4.0-1147-awsUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-virtualUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-6.11Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1086-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-5.4.0-218-genericUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-6.11.0-1016-gcp-64k | Jun 20, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub