In the Linux kernel, the following vulnerability has been resolved:
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
Blamed commit did not take care of VLAN encapsulations as spotted by syzbot [1].
Use skb_vlan_inet_prepare() instead of pskb_inet_may_pull().
[1] BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321 __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] IP6_ECN_decapsulate+0x7a8/0x1fa0 include/net/inet_ecn.h:321 ip6ip6_dscp_ecn_decapsulate+0x16f/0x1b0 net/ipv6/ip6_tunnel.c:729 __ip6_tnl_rcv+0xed9/0x1b50 net/ipv6/ip6_tunnel.c:860 ip6_tnl_rcv+0xc3/0x100 net/ipv6/ip6_tunnel.c:903 gre_rcv+0x1529/0x1b90 net/ipv6/ip6_gre.c:-1 ip6_protocol_deliver_rcu+0x1c89/0x2c60 net/ipv6/ip6_input.c:438 ip6_input_finish+0x1f4/0x4a0 net/ipv6/ip6_input.c:489 NF_HOOK include/linux/netfilter.h:318 [inline] ip6_input+0x9c/0x330 net/ipv6/ip6_input.c:500 ip6_mc_input+0x7ca/0xc10 net/ipv6/ip6_input.c:590 dst_input include/net/dst.h:474 [inline] ip6_rcv_finish+0x958/0x990 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:318 [inline] ipv6_rcv+0xf1/0x3c0 net/ipv6/ip6_input.c:311 __netif_receive_skb_one_core net/core/dev.c:6139 [inline] __netif_receive_skb+0x1df/0xac0 net/core/dev.c:6252 netif_receive_skb_internal net/core/dev.c:6338 [inline] netif_receive_skb+0x57/0x630 net/core/dev.c:6397 tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485 tun_get_user+0x5c0e/0x6c60 drivers/net/tun.c:1953 tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0xbe2/0x15d0 fs/read_write.c:686 ksys_write fs/read_write.c:738 [inline] __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746 x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Uninit was created at: slab_post_alloc_hook mm/slub.c:4960 [inline] slab_alloc_node mm/slub.c:5263 [inline] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 mm/slub.c:5315 kmalloc_reserve+0x13c/0x4b0 net/core/skbuff.c:586 __alloc_skb+0x805/0x1040 net/core/skbuff.c:690 alloc_skb include/linux/skbuff.h:1383 [inline] alloc_skb_with_frags+0xc5/0xa60 net/core/skbuff.c:6712 sock_alloc_send_pskb+0xacc/0xc60 net/core/sock.c:2995 tun_alloc_skb drivers/net/tun.c:1461 [inline] tun_get_user+0x1142/0x6c60 drivers/net/tun.c:1794 tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0xbe2/0x15d0 fs/read_write.c:686 ksys_write fs/read_write.c:738 [inline] __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __x64_sys_write+0x1fb/0x4d0 fs/read_write.c:746 x64_sys_call+0x30ab/0x3e70 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd3/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f
CPU: 0 UID: 0 PID: 6465 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-rt-64k-develUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-64k-debug-develUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64kUpgrade libperfUpgrade kernel-tools-libsUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-64kUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-coreUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-modules-extra | Oct 11, 2026 | Aug 26, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.251-248.983Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade kernel6.12-libbpf-develUpgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.163-186.299Upgrade perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-libbpfUpgrade kernelUpgrade bpftool6.12Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-toolsUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-headersUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-debuginfo-common-x86_64 | Mar 9, 2026 | Jan 25, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 12, 2026 | Jan 25, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 17, 2026 | Jan 25, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perf-debuginfoUpgrade rtlaUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade libperf | Aug 31, 2026 | Aug 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1105-awsUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-intelUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-6.17Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-gcp-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-176-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-aws-5.15Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-176-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-6.17Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-nvidia-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-oracle-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-realtime-6.17Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-5.15Upgrade linux-image-gke-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-genericUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-oem-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8 | Apr 10, 2026 | Jan 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub