In the Linux kernel, the following vulnerability has been resolved:
net: sched: act_csum: validate nested VLAN headers
tcf_csum_act() walks nested VLAN headers directly from skb->data when an skb still carries in-payload VLAN tags. The current code reads vlan->h_vlan_encapsulated_proto and then pulls VLAN_HLEN bytes without first ensuring that the full VLAN header is present in the linear area.
If only part of an inner VLAN header is linearized, accessing h_vlan_encapsulated_proto reads past the linear area, and the following skb_pull(VLAN_HLEN) may violate skb invariants.
Fix this by requiring pskb_may_pull(skb, VLAN_HLEN) before accessing and pulling each nested VLAN header. If the header still is not fully available, drop the packet through the existing error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-64k-develUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-rt-64k-debugUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-rt-64k-modules-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-extra | May 28, 2026 | May 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.209-147.245Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.258-257.1041 | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 3, 2026 | Apr 25, 2026 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade perfUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules | Jun 1, 2026 | May 31, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-gkeopUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04 | May 25, 2026 | Apr 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | Apr 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub