In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't redirect packets with invalid pkt_len
Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is, the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf prog which redirects empty skbs. So we should determine whether the length of the packet modified by bpf prog or others like bpf_prog_test is valid before forwarding it directly.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.144-127.601Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.69-37.134Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-oracle-5.15Upgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-iotUpgrade linux-riscv-5.15Upgrade linux-kvm | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub