Linux Kernel RCU-Based Improvement in IPv6 Transmission Function to Prevent Use-After-Free Vulnerability

Vulnerability

A vulnerability related to a use-after-free (UAF) issue has been addressed in the Linux kernel's IPv6 transmission function, ip6_xmit(). This vulnerability arises from improper handling of reference counts for network devices, which could potentially be exploited. The issue is now resolved by using Read-Copy Update (RCU) mechanisms to safely manage these references, ensuring that the device remains valid during transmission. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to a use-after-free condition, allowing for potential memory corruption or exploitation scenarios commonly associated with such issues.

Added: Nov 12, 2025, 11:56 AM
Updated: Nov 12, 2025, 5:30 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
1.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.