In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails.
Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6_nh") moved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init() but forgot to add cleanup for fib6_nh->nh_common.nhc_pcpu_rth_output in case it fails to allocate fib6_nh->rt6i_pcpu, resulting in memleak.
Let's call fib_nh_common_release() and clear nhc_pcpu_rth_output in the error path.
Note that we can remove the fib6_nh_release() call in nh_create_ipv6() later in net-next.git.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.180-122.191Upgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-devel | Jun 23, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.22-27.96Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade perf6.12Upgrade perfUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernelUpgrade python3-perf6.12Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.132-147.221 | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jul 21, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jul 1, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2025 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-1147-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-5.4.0-218-genericUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-6.11Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-raspi-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-5.15.0-1086-aws | Jun 20, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub