CVE-2025-22005: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix memleak of nhcpcpurthoutput in fibchecknhv6gw().
fibchecknhv6gw() expects that fib6nhinit() cleans up everything when it fails.
Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6nh") moved fibnhcommoninit() before allocpercpugfp() within fib6nhinit() but forgot to add cleanup for fib6nh->nhcommon.nhcpcpurthoutput in case it fails to allocate fib6nh->rt6ipcpu, resulting in memleak.
Let's call fibnhcommonrelease() and clear nhcpcpurthoutput in the error path.
Note that we can remove the fib6nhrelease() call in nhcreateipv6() later in net-next.git.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22005?
CVE-2025-22005 is classified as a memory leak vulnerability in the Linux kernel.
What software is affected by CVE-2025-22005?
CVE-2025-22005 affects the Linux Kernel, specifically versions that utilize the ipv6 functionality.
How do I fix CVE-2025-22005?
To remediate CVE-2025-22005, update to the latest stable version of the Linux kernel that includes the patch.
What does CVE-2025-22005 impact?
CVE-2025-22005 impacts the memory management in the ipv6 module of the Linux kernel.
Can CVE-2025-22005 lead to system instability?
Yes, CVE-2025-22005 can potentially lead to memory leaks that might affect system performance and stability.