A critical memory corruption vulnerability in the Linux kernel ip6_tunnel module poses a severe risk of remote code execution and system instability.

The vulnerability exists due to improper handling of skb metadata during IPv6 ICMP error processing in the ip6ip6_err function. An unauthenticated attacker can supply a malformed inner destination-options header that triggers an out-of-bounds memory access, leading to corruption of the skb_shared_info structure.

This vulnerability is rated as critical with a CVSS score of 9.8, indicating that it is highly exploitable and provides an attacker with complete control over the affected system. Successful exploitation could lead to full system compromise, unauthorized data access, and significant service disruption. Given the ubiquity of the Linux kernel, this flaw represents a severe risk to infrastructure stability and organizational data integrity.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.152, or the latest available stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events or unexpected crashes that may indicate exploitation attempts, particularly in environments utilizing IPv6 tunnels.

Compensating Controls: If immediate patching is not feasible, restrict network access to IPv6 tunnel endpoints and utilize network-level filtering to block malformed ICMPv6 packets.

Public Exploit Available: Unknown

The severity of this vulnerability necessitates immediate attention from all security and IT operations teams managing Linux-based infrastructure. Administrators should prioritize the deployment of kernel updates to eliminate the potential for remote code execution. Continuous monitoring of system stability and network traffic is recommended until the patch is successfully applied across all affected production systems.