CVE-2025-71080

Source
https://cve.org/CVERecord?id=CVE-2025-71080
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71080.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-71080
Downstream
Related
Published
2026-01-13T15:34:44.832Z
Modified
2026-05-15T11:54:23.775456781Z
Summary
ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT
Details

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix a BUG in rt6getpcpuroute() under PREEMPTRT

On PREEMPTRT kernels, after rt6getpcpuroute() returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6makepcpuroute() and successfully install a pcpurt entry. When the first task resumes execution, its cmpxchg() in rt6makepcpuroute() will fail because rt6ipcpu is no longer NULL, triggering the BUGON(prev). It's easy to reproduce it by adding mdelay() after rt6getpcpuroute().

Using preemptdisable/enable is not appropriate here because ip6rtpcpualloc() may sleep.

Fix this by handling the cmpxchg() failure gracefully on PREEMPTRT: free our allocation and return the existing pcpurt installed by another task. The BUGON is replaced by WARNONONCE for non-PREEMPTRT kernels where such races should not occur.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71080.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.64
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71080.json"