In the Linux kernel, the following vulnerability has been resolved:
net/ip6_tunnel: Prevent perpetual tunnel growth
Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd ("net: ip_tunnel: prevent perpetual headroom growth"), ipv6 tunnel yet increases the headroom without any ceiling.
Reflect ipv4 tunnel headroom adjustment limit on ipv6 version.
Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.247-246.989Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.196-137.219Upgrade kernel-develUpgrade kernel-livepatch-5.10.245-241.976Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-280.713Upgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel6.12-libbpfUpgrade kernel-toolsUpgrade kernel6.12-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel-livepatch-6.12.55-74.119Upgrade perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.158-178.288Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-tools-debuginfo | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 14, 2025 | Nov 14, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Nov 12, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.17Upgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-azure-6.17Upgrade linux-image-oem-22.04cUpgrade linux-image-fipsUpgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.17Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-raspi-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-170-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.17Upgrade linux-image-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-oem-6.17Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1100-awsUpgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-6.17Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-raspi-6.17 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub