In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_policy: fix strict mode inbound policy matching
match_policy_in() walks sec_path entries from the last transform to the first one, but strict policy matching needs to consume info->pol[] in the same forward order as the rule layout.
Derive the strict-match policy position from the number of transforms already consumed so that multi-element inbound rules are matched consistently.
CVSS Details
- CVSS 3.1 Base Score: 8.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.258-257.1041Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.209-147.245 | Jul 7, 2026 | Jul 7, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-headersUpgrade kernel6.18-debuginfoUpgrade kernel-livepatch-6.18.33-63.124Upgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade perf6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-toolsUpgrade perf6.18Upgrade python3-perf6.18Upgrade bpftool6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-uki-virtUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfo | Aug 31, 2026 | Aug 27, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-virtual-7.0Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-generic-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-xilinxUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-aws-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-realtime-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-bosUpgrade linux-image-laptop-23.10Upgrade linux-image-gke-7.0Upgrade linux-image-gke-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-7.0Upgrade linux-image-azure-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-azure-fde-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-7.0Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-hwe-22.04 | Jul 20, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub