In the Linux kernel, the following vulnerability has been resolved:
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
xfrm6_get_saddr() does not check the return value of ipv6_dev_get_saddr(). When ipv6_dev_get_saddr() fails to find a suitable source address (returns -EADDRNOTAVAIL), saddr->in6 is left uninitialized, but xfrm6_get_saddr() still returns 0 (success).
This causes the caller xfrm_tmpl_resolve_one() to use the uninitialized address in xfrm_state_find(), triggering KMSAN warning:
===================================================== BUG: KMSAN: uninit-value in xfrm_state_find+0x2424/0xa940 xfrm_state_find+0x2424/0xa940 xfrm_resolve_and_create_bundle+0x906/0x5a20 xfrm_lookup_with_ifid+0xcc0/0x3770 xfrm_lookup_route+0x63/0x2b0 ip_route_output_flow+0x1ce/0x270 udp_sendmsg+0x2ce1/0x3400 inet_sendmsg+0x1ef/0x2a0 __sock_sendmsg+0x278/0x3d0 __sys_sendto+0x593/0x720 __x64_sys_sendto+0x130/0x200 x64_sys_call+0x332b/0x3e70 do_syscall_64+0xd3/0xf80 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Local variable tmp.i.i created at: xfrm_resolve_and_create_bundle+0x3e3/0x5a20 xfrm_lookup_with_ifid+0xcc0/0x3770 =====================================================
Fix by checking the return value of ipv6_dev_get_saddr() and propagating the error.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.252-250.992Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.202-141.223Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade kernel6.18-modules-extraUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-tools-develUpgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade perf6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-libbpf | May 19, 2026 | May 6, 2026 |
| Debian | — | Upgrade linux | May 7, 2026 | May 7, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-azure-fde-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-5.15.0-1117-azure-fips | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub