In the Linux kernel, the following vulnerability has been resolved:
net: do not pass flow_id to set_rps_cpu()
Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change.
Compute flow_id in set_rps_cpu(), do not assume we can use the value computed by get_rps_cpu(). Otherwise we risk out-of-bound access and/or crashes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade perf6.18-debuginfoUpgrade bpftool6.18Upgrade python3-perf6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-libbpf-develUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel6.18-modules-extraUpgrade perf6.18Upgrade kernel6.18-libbpf-staticUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-libbpfUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo | May 19, 2026 | May 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub