CVE-2025-68241

A race condition was found in the Linux kernel's IPv4 routing code. When fnhe_remove_oldest() selects an fnhe entry for deletion, a concurrent __mkroute_output() can fetch and bind the same entry via rt_bind_exception() before it is freed. This results in a dst reference leak that prevents network device unregistration, causing the "waiting for sitX to become free" warning.

Exploitation requires concurrent SIT tunnel traffic with specific routing cache pressure. The primary impact is resource leakage preventing device cleanup, not a direct security compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.