In the Linux kernel, the following vulnerability has been resolved:
ipvlan: ensure network headers are in skb linear part
syzbot found that ipvlan_process_v6_outbound() was assuming the IPv6 network header isis present in skb->head [1]
Add the needed pskb_network_may_pull() calls for both IPv4 and IPv6 handlers.
[1] BUG: KMSAN: uninit-value in __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 ipv6_addr_type include/net/ipv6.h:555 [inline] ip6_route_output_flags_noref net/ipv6/route.c:2616 [inline] ip6_route_output_flags+0x51/0x720 net/ipv6/route.c:2651 ip6_route_output include/net/ip6_route.h:93 [inline] ipvlan_route_v6_outbound+0x24e/0x520 drivers/net/ipvlan/ipvlan_core.c:476 ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:491 [inline] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:541 [inline] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:605 [inline] ipvlan_queue_xmit+0xd72/0x1780 drivers/net/ipvlan/ipvlan_core.c:671 ipvlan_start_xmit+0x5b/0x210 drivers/net/ipvlan/ipvlan_main.c:223 __netdev_start_xmit include/linux/netdevice.h:5150 [inline] netdev_start_xmit include/linux/netdevice.h:5159 [inline] xmit_one net/core/dev.c:3735 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3751 sch_direct_xmit+0x399/0xd40 net/sched/sch_generic.c:343 qdisc_restart net/sched/sch_generic.c:408 [inline] __qdisc_run+0x14da/0x35d0 net/sched/sch_generic.c:416 qdisc_run+0x141/0x4d0 include/net/pkt_sched.h:127 net_tx_action+0x78b/0x940 net/core/dev.c:5484 handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:561 __do_softirq+0x14/0x1a kernel/softirq.c:595 do_softirq+0x9a/0x100 kernel/softirq.c:462 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x2758/0x57d0 net/core/dev.c:4611 dev_queue_xmit include/linux/netdevice.h:3311 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3132 [inline] packet_sendmsg+0x93e0/0xa7e0 net/packet/af_packet.c:3164 sock_sendmsg_nosec net/socket.c:718 [inline]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headers | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-develUpgrade dtb-sprd | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04 | May 21, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub