In the Linux kernel, the following vulnerability has been resolved:
openvswitch: fix GSO userspace truncation underflow
OVS_ACTION_ATTR_TRUNC currently stores a delta from the original skb length in OVS_CB(skb)->cutlen. When a later userspace action segments a GSO skb, queue_gso_packets() reuses that delta for each smaller segment. A segment can then reach queue_userspace_packet() with cutlen greater than skb->len, underflowing the length passed to skb_zerocopy().
Store the maximum preserved length instead and bound each consumer against the current skb length. Use U32_MAX as the no-truncation sentinel so the value remains valid if skb geometry changes before a consumer handles it.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules | Oct 15, 2026 | Oct 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.10.265-265.1078Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.220-153.252Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade perf6.12Upgrade perf6.18Upgrade perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel-livepatch-6.12.103-127.188Upgrade python3-perf6.18Upgrade kernel6.12Upgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-develUpgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade microvm-kernel6.18Upgrade kernel6.18-debuginfoUpgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-develUpgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade bpftool6.12Upgrade kernel6.18Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.12-debuginfo | Sep 1, 2026 | Aug 10, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 11, 2026 | Aug 11, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Aug 10, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 13, 2026 | Aug 10, 2026 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade perfUpgrade libperfUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-toolsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-core | Oct 16, 2026 | Oct 14, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-6.8.0-1067-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1071-gcp-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-aws-7.0Upgrade linux-image-6.8.0-1071-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1067-aws-fipsUpgrade linux-image-6.8.0-1071-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-26.04Upgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-6.8.0-147-lowlatency-64kUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-198-fipsUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-6.8.0-1067-awsUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-6.8.0-1052-gkeopUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1064-oracleUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-26.04aUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-26.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-6.8.0-147-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1080-xilinx-zynqmpNo solution existsUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-7.0Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1067-ibmUpgrade linux-image-6.8.0-1064-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.1-1062-realtimeUpgrade linux-image-6.8.0-1066-gke-64kUpgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-realtimeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fde-7.0Upgrade linux-image-aws-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-6.8.0-1071-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-147-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-7.0.0-38-genericUpgrade linux-image-6.8.0-147-genericUpgrade linux-image-6.8.0-1066-gkeUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-realtime-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-147-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-virtual-7.0Upgrade linux-image-6.8.0-1069-azure-fdeUpgrade linux-image-6.8.0-1071-gcp-fipsUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-aws-64k-lts-24.04 | Sep 21, 2026 | Sep 18, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub