In the Linux kernel, the following vulnerability has been resolved:
tcp: add sanity checks to rx zerocopy
TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs.
This patch adds to can_map_frag() these additional checks:
- Page must not be a compound one. - page->mapping must be NULL.
This fixes the panic reported by ZhangPeng.
syzbot was able to loopback packets built with sendfile(), mapping pages owned by an ext4 file to TCP rx zerocopy.
r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e24, @empty}, 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181e42, 0x0) fallocate(r5, 0x0, 0x0, 0x85b8) sendfile(r4, r5, 0x0, 0x8ba0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181e42, 0x0)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade libperfUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-rt-debug-devel | Aug 12, 2024 | Mar 18, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.149-99.161Upgrade python-perfUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfo | Jul 9, 2024 | Mar 18, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade python3-perf | Feb 17, 2025 | Mar 18, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jul 16, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jun 26, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python3-perf | Jul 23, 2024 | Mar 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 18, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade libperf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matched | Aug 22, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Oct 31, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1139-azure | May 17, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 18, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub