In the Linux kernel, the following vulnerability has been resolved:
net: gro: don't merge zcopy skbs
skb_gro_receive() can currently copy frags between the source and GRO skb, without checking the zerocopy status, and in particular the SKBFL_MANAGED_FRAG_REFS flag.
When SKBFL_MANAGED_FRAG_REFS is set, the skb doesn't hold a reference on the pages in shinfo->frags. Appending those frags to another skb's frags without fixing up the page refcount can lead to UAF.
When either the last skb in the GRO chain (the one we would append frags to) or the source skb is zerocopy, don't merge the skbs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-coreUpgrade kernel | Jul 9, 2026 | Jul 6, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.18.30-61.119Upgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool6.18Upgrade bpftool6.12-debuginfoUpgrade bpftoolUpgrade kernel6.18Upgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel6.18-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.172-216.339Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.18-develUpgrade perfUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12Upgrade kernel6.18-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade bpftool6.12Upgrade kernel-modules-extraUpgrade kernel6.18-toolsUpgrade python3-perfUpgrade perf6.18-debuginfoUpgrade perf6.12Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.18-debuginfoUpgrade kernel-livepatch-6.12.88-119.160Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel-headersUpgrade python3-perf6.18-debuginfoUpgrade perf6.18Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel-tools-develUpgrade python3-perf6.18Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.12 | Jun 23, 2026 | Jun 9, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | May 19, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 24, 2026 | May 19, 2026 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-debugUpgrade libperf-debuginfoUpgrade kernel-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade python3-perf | Jul 13, 2026 | Jul 11, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-26.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-7.0Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-7.0.0-1007-azureUpgrade linux-image-lowlatency-64k-6.8 | Jun 16, 2026 | Jun 9, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 9, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub