In the Linux kernel, the following vulnerability has been resolved:
net: usb: smsc95xx: Limit packet length to skb->len
Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the cloned skb passed up the network stack will leak kernel memory contents.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.313-235.533Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linuxUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-raspi | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub