In the Linux kernel, the following vulnerability has been resolved:
xsk: fix an integer overflow in xp_create_and_assign_umem()
Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade rvUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debugUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-coreUpgrade python3-perfUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules | Jun 13, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.22-27.96Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 10, 2025 | Apr 3, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvm | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-marvellUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-debug | Dec 5, 2025 | Jun 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-virtualUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-azure-6.11Upgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-6.8 | Jun 26, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub