CVE - CVE-2025-22005

CVE-ID
CVE-2025-22005	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). fib_check_nh_v6_gw() expects that fib6_nh_init() cleans up everything when it fails. Commit 7dd73168e273 ("ipv6: Always allocate pcpu memory in a fib6_nh") moved fib_nh_common_init() before alloc_percpu_gfp() within fib6_nh_init() but forgot to add cleanup for fib6_nh->nh_common.nhc_pcpu_rth_output in case it fails to allocate fib6_nh->rt6i_pcpu, resulting in memleak. Let's call fib_nh_common_release() and clear nhc_pcpu_rth_output in the error path. Note that we can remove the fib6_nh_release() call in nh_create_ipv6() later in net-next.git.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/119dcafe36795a15ae53351cbbd6177aaf94ffef URL:https://git.kernel.org/stable/c/119dcafe36795a15ae53351cbbd6177aaf94ffef MISC:https://git.kernel.org/stable/c/29d91820184d5cbc70f3246d4911d96eaeb930d6 URL:https://git.kernel.org/stable/c/29d91820184d5cbc70f3246d4911d96eaeb930d6 MISC:https://git.kernel.org/stable/c/77c41cdbe6bce476e08d3251c0d501feaf10a9f3 URL:https://git.kernel.org/stable/c/77c41cdbe6bce476e08d3251c0d501feaf10a9f3 MISC:https://git.kernel.org/stable/c/9740890ee20e01f99ff1dde84c63dcf089fabb98 URL:https://git.kernel.org/stable/c/9740890ee20e01f99ff1dde84c63dcf089fabb98 MISC:https://git.kernel.org/stable/c/d3d5b4b5ae263c3225db363ba08b937e2e2b0380 URL:https://git.kernel.org/stable/c/d3d5b4b5ae263c3225db363ba08b937e2e2b0380
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)