In the Linux kernel, the following vulnerability has been resolved:
tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
The type of sk_rcvbuf and sk_sndbuf in struct sock is int, and in tcp_add_backlog(), the variable limit is caculated by adding sk_rcvbuf, sk_sndbuf and 64 * 1024, it may exceed the max value of int and overflow. This patch reduces the limit budget by halving the sndbuf to solve this issue since ACK packets are much smaller than the payload.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-core | Feb 3, 2026 | Feb 2, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.15.79-51.138Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.155-138.670Upgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel | Feb 4, 2026 | Dec 30, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 3, 2026 | Dec 30, 2025 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade python3-perf | Feb 13, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-azureUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-oracleUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-xilinx-zynqmpUpgrade linux-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-lowlatencyUpgrade linux-iotUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-hwe-5.4Upgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-gcp-5.4 | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub