In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Validate length in packet header before skb_put()
When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky.
Validate the length as advertised by the packet header before calling virtio_vsock_skb_rx_put().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernelUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-core | Nov 21, 2025 | Nov 17, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-headersUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade bpftool6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade perf-debuginfo | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 27, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 28, 2025 | Sep 5, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfo | Feb 5, 2026 | Nov 2, 2025 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dlm-kmp-azure | Dec 5, 2025 | Oct 30, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-kvmUpgrade linux-image-gke-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-aws | Feb 12, 2026 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 30, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub