In the Linux kernel, the following vulnerability has been resolved:
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
syzkaller found a memory leak in kcm_sendmsg(), and commit c821a88bd720 ("kcm: Fix memory leak in error path of kcm_sendmsg()") suppressed it by updating kcm_tx_msg(head)->last_skb if partial data is copied so that the following sendmsg() will resume from the skb.
However, we cannot know how many bytes were copied when we get the error. Thus, we could mess up the MSG_MORE queue.
When kcm_sendmsg() fails for SOCK_DGRAM, we should purge the queue as we do so for UDP by udp_flush_pending_frames().
Even without this change, when the error occurred, the following sendmsg() resumed from a wrong skb and the queue was messed up. However, we have yet to get such a report, and only syzkaller stumbled on it. So, this can be changed safely.
Note this does not change SOCK_SEQPACKET behaviour.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.326-245.539Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.55-75.123 | Jan 12, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-hwe-5.15Upgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.15Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-iotUpgrade linux-azureUpgrade linux-awsUpgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-realtime | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub