In the Linux kernel, the following vulnerability has been resolved:
tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
The type of sk_rcvbuf and sk_sndbuf in struct sock is int, and in tcp_add_backlog(), the variable limit is caculated by adding sk_rcvbuf, sk_sndbuf and 64 * 1024, it may exceed the max value of int and overflow. This patch reduces the limit budget by halving the sndbuf to solve this issue since ACK packets are much smaller than the payload.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel | Feb 3, 2026 | Feb 2, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.79-51.138Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel | Feb 4, 2026 | Dec 30, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 3, 2026 | Dec 30, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modules | Feb 13, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-raspi-5.4Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-iotUpgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-oracle-5.15 | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub