In the Linux kernel, the following vulnerability has been resolved:
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(), but leave needed_headroom and needed_tailroom set to 0.
When the underlying phy_dev (or stacked lower device) requires extra headroom or tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx headroom), upper layers calculating packet headroom and tailroom fail to reserve sufficient space.
This can result in reallocation overhead, skb headroom underflows, or KASAN slab-use-after-free crashes when dev_hard_header() / ipvlan_hard_header() prepends header data or when lower devices append tailroom.
Fix this by: 1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init(). 2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade libperfUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modules | Oct 11, 2026 | Oct 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.269-270.1108Upgrade kernel-headersUpgrade python-perf | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18-toolsUpgrade microvm-kernel6.18Upgrade kernel6.18Upgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.18-modules-extra-commonUpgrade perf6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade python3-perf6.18Upgrade perf6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perf6.18-debuginfo | Sep 30, 2026 | Aug 26, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 27, 2026 | Aug 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 31, 2026 | Aug 26, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matched | Oct 7, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 26, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub