PT-2025-8869 · Linux · Linux Kernel

Published 2025-02-27 · Updated 2025-03-25 · CVE-2025-21757

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, specifically related to dst refleaks in rpl, seg6, and ioam6 lwtunnels. The dst cache get() function gives a reference that needs to be released. This issue was discovered by the ioam6.sh test and is related to per-cpu memory leaks, which kmemleak was recently fixed to catch.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-21757

Affected Products

Linux Kernel

References · 14

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21757 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-21757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21757 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-21757 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21757 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-21757 · Vendor Advisory
• https://git.kernel.org/stable/c/c71a192976ded2f2f416d03c4f595cdd4478b825 · Note
• https://twitter.com/CVEnew/status/1895260248304132176 · Twitter Post
• https://git.kernel.org/stable/c/bf500b0d0cfe92ee62dfd4c2ace7f6353cf3a4c8 · Note
• https://git.kernel.org/linus/c71a192976ded2f2f416d03c4f595cdd4478b825 · Note
• https://git.kernel.org/stable/c/2248b8145053eb2ae35ca4cf694b885a086719bb · Note
• https://git.kernel.org/stable/c/d90f8f930c3053bb11f5def9aff5310a70429260 · Note
• https://git.kernel.org/stable/c/cb9950eaaf9cc76dfe490c06aa11f185b3c7f22b · Note
• https://twitter.com/spendergrsec/status/1904361788944138393 · Twitter Post