In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF
macvlan_get_size() does not account for IFLA_MACVLAN_BC_CUTOFF, but macvlan_fill_info() conditionally includes it when port->bc_cutoff != 1. This causes nla_put_s32() to fail with -EMSGSIZE when the netlink skb runs out of space, triggering a WARN_ON in rtnetlink and preventing the interface from being dumped.
The bug can be reproduced with:
ip link add macvlan0 link eth0 type macvlan mode bridge ip link set macvlan0 type macvlan bc_cutoff 0 ip -d link show macvlan0 # fails with -EMSGSIZE
The bc_cutoff feature was added in commit 954d1fa1ac93 ("macvlan: Add netlink attribute for broadcast cutoff"), which added the nla_put_s32() call in macvlan_fill_info() but missed adding the corresponding nla_total_size(4) in macvlan_get_size(). A follow-up commit 55cef78c244d ("macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF") fixed the missing nla_policy entry but still did not fix the size calculation.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18Upgrade kernel6.18-modules-extraUpgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel-livepatch-6.18.33-63.124Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oem-20.04dUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-26.04Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oem-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-awsUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-7.0Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-7.0Upgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-bosUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-fipsUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-realtime-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-laptop-23.10Upgrade linux-image-gke-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-gkeopUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-hwe-26.04 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub