In the Linux kernel, the following vulnerability has been resolved:
vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
skb_tunnel_check_pmtu() can change skb->head.
Reusing old_iph afer skb_tunnel_check_pmtu() can cause an UAF.
Use instead ip_hdr(skb) as done in drivers/net/bareudp.c and drivers/net/geneve.c.
Found by Sashiko.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.259-258.1043Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.210-148.245Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel | Aug 2, 2026 | Aug 2, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.18.35-68.127Upgrade python3-perf6.18Upgrade kernel6.12-modules-extra-commonUpgrade bpftool6.18Upgrade kernel6.18-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.18-debuginfoUpgrade kernel6.12-headersUpgrade bpftool6.18-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.18-tools-develUpgrade microvm-kernel6.18Upgrade kernel-livepatch-6.12.94-123.174Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.18Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-toolsUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.176-220.358Upgrade bpftoolUpgrade python3-perf6.12Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel6.18Upgrade kernel6.12-toolsUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.12Upgrade kernel6.18-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64 | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 23, 2026 | Jul 19, 2026 |
| Rocky_linux | — | Upgrade kernel-uki-virt-addonsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade libperf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules | Sep 15, 2026 | Sep 9, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-194-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-142-lowlatencyUpgrade linux-image-6.8.1-1060-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1117-gcpUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1063-nvidia-lowlatencyUpgrade linux-image-6.8.0-1066-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-142-lowlatency-64kUpgrade linux-image-6.8.0-2054-raspi-realtimeUpgrade linux-image-5.15.0-1108-kvmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-7.0Upgrade linux-image-6.8.0-1063-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1116-aws-64kUpgrade linux-image-5.15.0-1121-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1065-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.8.0-1068-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1116-awsUpgrade linux-image-aws-64k-7.0Upgrade linux-image-5.15.0-1116-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-194-generic-lpaeUpgrade linux-image-6.8.0-1064-gkeUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1069-gcp-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1069-gcpUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-5.15.0-1113-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1079-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1111-intel-iotgUpgrade linux-image-5.15.0-1116-aws-fipsUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-142-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-6.8.0-1064-gke-64kUpgrade linux-image-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1063-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1112-gkeUpgrade linux-image-raspiUpgrade linux-image-raspi-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1122-azureUpgrade linux-image-5.15.0-1115-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-6.8.0-1065-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1068-gcp-fipsUpgrade linux-image-5.15.0-1110-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-7.0Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1063-nvidia-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-7.0Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-5.15.0-194-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-142-fipsUpgrade linux-image-5.15.0-194-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-7.0Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-5.15.0-1122-azure-fipsUpgrade linux-image-5.15.0-1108-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-194-generic-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-142-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1099-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-6.8.0-1062-oracleUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.8.0-1068-azure-fipsUpgrade linux-image-6.8.0-1062-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.8.0-1050-gkeopUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub