In the Linux kernel, the following vulnerability has been resolved:
ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
xfrm6_rcv_encap() performs an IPv6 route lookup when the skb does not already have a dst attached. ip6_route_input_lookup() returns a referenced dst entry even when the lookup resolves to an error route.
If dst->error is set, xfrm6_rcv_encap() drops the skb without attaching the dst to the skb and without releasing the reference returned by the lookup. Repeated packets hitting this path therefore leak dst entries.
Release the dst before jumping to the drop path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.10.258-257.1041 | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.18Upgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade perf6.18Upgrade kernel6.18-toolsUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-modules-extraUpgrade kernel6.18-devel | Jun 23, 2026 | May 28, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 28, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-7.0Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-ibm-7.0Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-realtime-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-7.0Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-7.0Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-7.0Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-7.0Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-nvidia-7.0Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-26.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-gcp-5.15Upgrade linux-image-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oracle-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04 | Jul 20, 2026 | May 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub