In the Linux kernel, the following vulnerability has been resolved:
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
This patch restricts setting Loose Source and Record Route (LSRR) and Strict Source and Record Route (SSRR) IP options to users with CAP_NET_RAW capability.
This prevents unprivileged applications from forcing packets to route through attacker-controlled nodes to leak TCP ISN and possibly other protocol information.
While LSRR and SSRR are commonly filtered in many network environments, they may still be supported and forwarded along some network paths.
RFC 7126 (Recommendations on Filtering of IPv4 Packets Containing IPv4 Options) recommend to drop these options in 4.3 and 4.4.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.15.210-148.245Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.259-258.1043Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade perf6.18Upgrade kernel6.12-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.18Upgrade bpftoolUpgrade kernel6.12-tools-develUpgrade kernel-develUpgrade bpftool6.18Upgrade kernel6.18-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel6.18-modules-extra-commonUpgrade perf6.12Upgrade kernelUpgrade python3-perf6.18-debuginfoUpgrade kernel-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.12-headersUpgrade kernel6.18-develUpgrade python3-perf6.18Upgrade python3-perf6.12Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.18.36-69.134Upgrade kernel6.12Upgrade kernel6.12-toolsUpgrade kernel6.18-headersUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.176-220.358Upgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.94-123.174Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.18-modules-extraUpgrade python3-perfUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel-tools-devel | Jul 8, 2026 | Jun 25, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 25, 2026 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1066-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.8.0-1064-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-azure-7.0Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-6.8.0-1069-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-6.8.0-1051-gkeopUpgrade linux-image-6.8.0-1064-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1063-oracle-64kUpgrade linux-image-6.8.0-1066-aws-fipsUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-6.8.0-146-generic-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-6.8.0-1065-gkeUpgrade linux-image-6.8.1-1061-realtimeUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-azure-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1066-aws-64kUpgrade linux-image-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1064-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-6.8.0-146-fipsUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1065-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-oem-7.0Upgrade linux-image-laptop-23.10Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-nvidia-bosUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-7.0Upgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1066-awsUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-6.8.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1063-oracleUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-7.0Upgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-gkeopUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gke-7.0Upgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-6.8.0-146-lowlatencyUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-6.8.0-146-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-oem-26.04bUpgrade linux-image-aws-fipsUpgrade linux-image-aws-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1070-gcpUpgrade linux-image-6.8.0-1070-azureUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-6.8.0-146-lowlatency-64kUpgrade linux-image-6.8.0-1070-gcp-64kUpgrade linux-image-6.8.0-1068-azure-fdeUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-6.8.0-1070-gcp-fipsUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-26.04 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | Jun 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub