CVE-2025-21768

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified, specifically in the ipv6 component, where certain lwtunnels (such as rpl, seg6, and ioam6) have a dst cache for post-transformation dst. This can lead to a situation where a packet's destination does not change, resulting in a reference to the lwtunnel being recorded in its own cache, causing the lwtunnel state to never be freed. This issue was discovered by the ioam6.sh test.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.