In the Linux kernel, the following vulnerability has been resolved:
xsk: Add missing overflow check in xdp_umem_reg
The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem->npgs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.106-64.140Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-tools-debuginfoUpgrade kernel-tools | Jun 23, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.23-36.46Upgrade bpftool | Jun 24, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gkeUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linuxUpgrade linux-awsUpgrade linux-gkeopUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub