https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:29:58 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40173 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/ip6_tunnel: Prevent perpetual tunnel growth</p> <p>Similarly to ipv4 tunnel, ipv6 version updates dev-&gt;needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd (&#34;net: ip_tunnel: prevent perpetual headroom growth&#34;), ipv6 tunnel yet increases the headroom without any ceiling.</p> <p>Reflect ipv4 tunnel headroom adjustment limit on ipv6 version.</p> <p>Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net/ip6_tunnel: Prevent perpetual tunnel growth</p> <p>Similarly to ipv4 tunnel, ipv6 version updates dev-&gt;needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd (&#34;net: ip_tunnel: prevent perpetual headroom growth&#34;), ipv6 tunnel yet increases the headroom without any ceiling.</p> <p>Reflect ipv4 tunnel headroom adjustment limit on ipv6 version.</p> <p>Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer.</p> https://vulnerability.circl.lu/vuln/cve-2025-40173