In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't redirect packets with invalid pkt_len
Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is, the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf prog which redirects empty skbs. So we should determine whether the length of the packet modified by bpf prog or others like bpf_prog_test is valid before forwarding it directly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-realtimeUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-iotUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-gcp | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub