In the Linux kernel, the following vulnerability has been resolved:
xfrm: hold dev ref until after transport_finish NF_HOOK
After async crypto completes, xfrm_input_resume() calls dev_put() immediately on re-entry before the skb reaches transport_finish. The skb->dev pointer is then used inside NF_HOOK and its okfn, which can race with device teardown.
Remove the dev_put from the async resumption entry and instead drop the reference after the NF_HOOK call in transport_finish, using a saved device pointer since NF_HOOK may consume the skb. This covers NF_DROP, NF_QUEUE and NF_STOLEN paths that skip the okfn.
For non-transport exits (decaps, gro, drop) and secondary async return points, release the reference inline when async is set.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-rt-64k-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade rtlaUpgrade kernel-64kUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debugUpgrade bpftoolUpgrade perfUpgrade rvUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64kUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-devel-matched | Oct 11, 2026 | Sep 17, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.92-122.166Upgrade bpftool6.12Upgrade kernel6.12 | Jun 23, 2026 | Apr 24, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 22, 2026 | Apr 24, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 17, 2026 | Apr 24, 2026 |
| Rocky_linux | — | Upgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-coreUpgrade rtlaUpgrade kernel-debuginfoUpgrade libperfUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-modules-extra-matchedUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.1-1061-realtimeUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-6.8.0-146-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kNo solution existsUpgrade linux-image-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fipsUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1064-nvidia-64kUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1069-azure-fipsUpgrade linux-image-laptop-23.10Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1070-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1066-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1063-oracle-64kUpgrade linux-image-6.8.0-1051-gkeopUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-146-lowlatency-64kUpgrade linux-image-6.8.0-146-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-146-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1065-gkeUpgrade linux-image-6.8.0-1064-nvidiaUpgrade linux-image-6.8.0-1064-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1070-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1066-aws-fipsUpgrade linux-image-6.8.0-1070-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1070-gcp-fipsUpgrade linux-image-6.8.0-1063-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1066-awsUpgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-6.8.0-146-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1068-azure-fdeUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1066-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1065-gke-64kUpgrade linux-image-6.8.0-1064-nvidia-lowlatency | May 25, 2026 | Apr 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 4, 2026 | Apr 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub