CVE-2012-1583: Linux Kernel

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.

Affected products

• Linux Linux Kernel: up to and including 2.6.21.7; version 2.6.0 only; version 2.6.1 only; version 2.6.2 only; version 2.6.10 only; version 2.6.11 only; …

Published 2012-06-16. Last modified 2026-06-16.