In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter
The sch_cake ACK filter parses packets to find the TCP header and filter duplicated ACKs if the flow is backlogged. The parsing code contains a WARN_ON(1) which can be triggered by a malformed IP header in certain cases. Depending on the system configuration, this leads either to either spamming dmesg with warnings, or a panic if panic_on_warn is set.
The code already correctly skips the offending packet in the branch that triggers the warning, so the WARN_ON itself doesn't really serve any purpose. So just drop it altogether to avoid the inconvenient side effects.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade perf6.18Upgrade kernel6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.18Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-devel | Sep 30, 2026 | Aug 22, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 26, 2026 | Aug 26, 2026 |
| Redhat_linux | — | No solution exists | Aug 26, 2026 | Aug 22, 2026 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-aws-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-oem-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1123-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtime | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub