CVE-2025-21768
kernel: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 27, 2025
Updated · October 29, 2026
Description
This is a memory leak vulnerability in the Linux kernel's Lightweight Tunnel (lwtunnel) subsystem. When triggered, it causes the lwtunnel state to never be freed, leading to gradual memory consumption over time. This can result in system performance degradation or resource exhaustion if the condition persists.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 · Missing Release of Memory after Effective Lifetime