CVE-2025-71098 ip6_gre: make ip6gre_header() robust

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address UAF Vulnerabilities in IPv6 Stack Four new Common Vulnerabilities and Exposures (CVEs) related to IPv6 have been published, addressing potential use-after-free (UAF) vulnerabilities in various functions of the IPv6 stack. The affected CVEs include CVE-2024-44986, CVE-2024-44985, and CVE-2024-44987, all published on September 4, 2024, and CVE-2022-49728, published on February 26, 2025. These vulnerabilities could impact systems utilizing the IPv6 protocol, necessitating prompt updates to mitigate risks. 5 sources 39