In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails.
Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6_nh") moved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init() but forgot to add cleanup for fib6_nh->nh_common.nhc_pcpu_rth_output in case it fails to allocate fib6_nh->rt6i_pcpu, resulting in memleak.
Let's call fib_nh_common_release() and clear nhc_pcpu_rth_output in the error path.
Note that we can remove the fib6_nh_release() call in nh_create_ipv6() later in net-next.git.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.180-122.191Upgrade kernel-tools-devel | Jun 23, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-6.12.22-27.96Upgrade kernel6.12Upgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf6.12Upgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade kernel-tools-debuginfo | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jul 21, 2025 | Apr 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Jul 1, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2025 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-syms-azure | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-5.4.0-1147-awsUpgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-azure-fde-edgeUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-azure-6.11Upgrade linux-image-intel-iotgUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.4.0-218-genericUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1086-awsUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx | Jun 20, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub