In the Linux kernel, the following vulnerability has been resolved:
xsk: tighten UMEM headroom validation to account for tailroom and min frame
The current headroom validation in xdp_umem_reg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore if multi-buffer would come to play then skb_shared_info stored at the end of XSK frame would be corrupted.
HW typically works with 128-aligned sizes so let us provide this value as bare minimum.
Multi-buffer setting is known later in the configuration process so besides accounting for 128 bytes, let us also take care of tailroom space upfront.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade perfUpgrade bpftool | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-intelUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-gkeopUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04 | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub