In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_queue: hold bridge skb->dev while queued
br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only holds references on state.in/out and bridge physdevs, so a queued bridge packet can retain a freed bridge master in skb->dev until reinjection.
When the verdict is reinjected later, br_netif_receive_skb() re-enters the receive path with skb->dev still pointing at the freed bridge master, triggering a use-after-free.
Store skb->dev in the queue entry, hold a reference on it for the queue lifetime, and use the saved device when dropping queued packets during NETDEV_DOWN handling.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.259-258.1043Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-tools-develUpgrade perf6.18-debuginfoUpgrade perf6.18Upgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extraUpgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel-livepatch-6.18.35-68.127Upgrade kernel6.18Upgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extra-common | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-core | Sep 28, 2026 | Sep 26, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1064-aws-fipsUpgrade linux-image-generic-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-26.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gke-7.0Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-ibm-7.0Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-139-fipsUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-24.04dUpgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-azure-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-139-genericUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinxUpgrade linux-image-nvidia-bosUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-5.15Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-genericUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-5.15Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1067-azureUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-lowlatency-5.15Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-7.0Upgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-6.8.0-1064-aws-64kUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-6.8.0-1064-awsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-5.15 | Jul 20, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub