In the Linux kernel, the following vulnerability has been resolved:
ca8210: fix mac_len negative array access
This patch fixes a buffer overflow access of skb->data if ieee802154_hdr_peek_addrs() fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-raspi-5.4Upgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-iotUpgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fipsUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-fde-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub