In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: clear suppressed fib6 rule result
fib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(), but leaves res->rt6 pointing at the released rt6_info.
If no later rule supplies a replacement, fib6_rule_lookup() still sees res.rt6 and returns that stale dst to its caller. A suppressing rule can therefore leak a released route back to rt6_lookup(), and the next put hits rcuref_put_slowpath() from dst_release().
Clear res->rt6 when suppressing the route so suppressed lookups fall through to the null dst instead of reusing the released one.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18Upgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.12Upgrade perf6.18-debuginfoUpgrade kernel6.12Upgrade kernel6.12-headersUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.103-127.188Upgrade perf6.18Upgrade kernel6.18-develUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18Upgrade microvm-kernel6.18Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-modules-extraUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.18-toolsUpgrade kernel6.12-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.18-headers | Sep 30, 2026 | Aug 21, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 24, 2026 | Aug 21, 2026 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade libperf-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-modules-extra-matchedUpgrade rvUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-core | Aug 31, 2026 | Aug 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 27, 2026 | Aug 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub