In the Linux kernel, the following vulnerability has been resolved:
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
get_netdev_for_sock() is called during setsockopt(), so not under RCU.
Using sk_dst_get(sk)->dev could trigger UAF.
Let's use __sk_dst_get() and dst_dev_rcu().
Note that the only ->ndo_sk_get_lower_dev() user is bond_sk_get_lower_dev(), which uses RCU.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.66-88.122Upgrade kernel6.12-headersUpgrade kernel-libbpfUpgrade perf6.12Upgrade kernel-headersUpgrade bpftool6.12Upgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade python3-perfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12Upgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.161-183.298Upgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel6.12-libbpf-debuginfo | Mar 27, 2026 | Nov 12, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 11, 2026 | Feb 11, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2026 | Nov 12, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 17, 2026 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade rvUpgrade kernel-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-6.17Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-6.17Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.17Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-fips-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinxUpgrade linux-image-raspi-6.17Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-realtime-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-6.17Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-aws-64k-6.17Upgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-5.15.0-1110-azure-fips | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub