A vulnerability in the Linux kernel IPv6 stack allows unauthenticated remote attackers to perform out of bounds memory reads, potentially leading to the disclosure of sensitive system information.

The vulnerability exists in the rt6_route_rcv function, which incorrectly validates the length of the Route Information option against the prefix length. An unauthenticated attacker can supply a crafted Router Advertisement packet to cause the kernel to read memory past the end of the option, which is then exposed to userspace.

This flaw poses a significant risk to data confidentiality, as it allows unauthorized parties to extract arbitrary data from kernel memory. Given the CVSS score of 7.5, the vulnerability is classified as high severity, reflecting the ease of exploitation over a network without requiring authentication. Such memory leaks can expose cryptographic keys, session tokens, or other sensitive kernel structures, potentially facilitating further exploitation or system compromise.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.152, or newer, depending on the current distribution branch.

Proactive Monitoring: Monitor network traffic for malformed Router Advertisement packets or unusual IPv6 traffic patterns that may indicate attempts to probe or exploit the kernel stack.

Compensating Controls: Implement strict network ingress filtering to drop unexpected Router Advertisements at the network perimeter or on host firewalls, where such traffic is not explicitly required.

Public Exploit Available: Unknown

This vulnerability represents a critical exposure for any environment relying on IPv6 networking. Administrators must prioritize patching the kernel to the specified fixed versions to prevent potential memory disclosure attacks. Given the nature of the flaw, failing to apply these updates leaves the system susceptible to remote information gathering by unauthenticated actors.