CVE Database›CVE-2025-71080

CVE-2025-71080

kernel: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · January 13, 2026

Updated · August 22, 2026

Description

A race condition vulnerability was found in the Linux kernel's IPv6 routing subsystem on PREEMPT_RT kernels. When rt6_get_pcpu_route() returns NULL and the task is preempted, another task can install a per-CPU route entry. When the original task resumes and attempts cmpxchg() in rt6_make_pcpu_route(), the operation fails because the pointer is no longer NULL, triggering a BUG_ON crash.

Statement

This vulnerability specifically affects PREEMPT_RT (real-time) kernel configurations during IPv6 routing operations. Standard kernel builds are not affected as the race window does not exist without RT preemption. The crash requires specific timing conditions and concurrent IPv6 route operations on the same CPU.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-368 · Context Switching Race Condition