CVE-2025-21768
Published: Feb 27, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels Some lwtunnels have a dst cache for post-transformation dst. If the packet destination did not change we may end up recording a reference to the lwtunnel in its own cache, and the lwtunnel state will never be freed. Discovered by the ioam6.sh test, kmemleak was recently fixed to catch per-cpu memory leaks. I'm not sure if rpl and seg6 can actually hit this, but in principle I don't see why not.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 6c8702c60b88651072460f3f4026c7dfe2521d12 - < 5ab11a4e219e93b8b31a27f8ec98d42afadd8b7aaffected 6c8702c60b88651072460f3f4026c7dfe2521d12 - < 4c0f200c7d06fedddde82209c099014d63f4a6c0affected 6c8702c60b88651072460f3f4026c7dfe2521d12 - < 92191dd1073088753821b862b791dcc83e558e07 |
Linux | Linux | affected 4.10unaffected 0 - < 4.10unaffected 6.12.16 - <= 6.12.*unaffected 6.13.4 - <= 6.13.*unaffected 6.14 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now