Riskcovery

CVE-2025-21768

net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels

State
Published
Severity
Not scored
Published
Feb 27, 2025
Updated
Oct 30, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels

Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed.

Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 26f0b472ae2a82920e38c7cf41583951046d586aAffected
  • 6c8702c60b88651072460f3f4026c7dfe2521d12 to before e2ef3fa31353b30bda94358fe5205c141289746dAffected
  • 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 5ab11a4e219e93b8b31a27f8ec98d42afadd8b7aAffected
  • 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 4c0f200c7d06fedddde82209c099014d63f4a6c0Affected
  • 6c8702c60b88651072460f3f4026c7dfe2521d12 to before 92191dd1073088753821b862b791dcc83e558e07Affected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.