In the Linux kernel, the following vulnerability has been resolved:
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.180-225.360Upgrade kernelUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Sep 1, 2026 | Aug 15, 2026 |
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 20, 2026 | Aug 15, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade libperfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules | Sep 23, 2026 | Sep 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 25, 2026 | Aug 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub