In the Linux kernel, the following vulnerability has been resolved:
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets.
When ppp_sync_txmung receives an incoming package with an empty payload: (remote) gef➤ p *(struct pppoe_hdr *) (skb->head + skb->network_header) $18 = { type = 0x1, ver = 0x1, code = 0x0, sid = 0x2, length = 0x0, tag = 0xffff8880371cdb96 }
from the skb struct (trimmed) tail = 0x16, end = 0x140, head = 0xffff88803346f400 "4", data = 0xffff88803346f416 ":\377", truesize = 0x380, len = 0x0, data_len = 0x0, mac_len = 0xe, hdr_len = 0x0,
it is not safe to access data[2].
[[email protected]: fixed subj typo]
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modulesUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-develUpgrade kernel-devel | May 27, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.10.253-251.1014Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 26, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 20, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade rtla | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-optional | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-6.8Upgrade linux-image-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-5.15 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub