CVE-2025-21768
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
28/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels<br />
<br />
Some lwtunnels have a dst cache for post-transformation dst.<br />
If the packet destination did not change we may end up recording<br />
a reference to the lwtunnel in its own cache, and the lwtunnel<br />
state will never be freed.<br />
<br />
Discovered by the ioam6.sh test, kmemleak was recently fixed<br />
to catch per-cpu memory leaks. I&#39;m not sure if rpl and seg6<br />
can actually hit this, but in principle I don&#39;t see why not.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 4.10 (including) | 6.12.16 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.13.4 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page