In the Linux kernel, the following vulnerability has been resolved:
genetlink: fix genl_bind() invoking bind() after -EPERM
Per family bind/unbind callbacks were introduced to allow families to track multicast group consumer presence, e.g. to start or stop producing events depending on listeners.
However, in genl_bind() the bind() callback was invoked even if capability checks failed and ret was set to -EPERM. This means that callbacks could run on behalf of unauthorized callers while the syscall still returned failure to user space.
Fix this by only invoking bind() after "if (ret) break;" check i.e. after permission checks have succeeded.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade kernel6.12-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade perf6.12 | Dec 9, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade dtb-marvellUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-optional | Dec 5, 2025 | Nov 6, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub