In the Linux kernel, the following vulnerability has been resolved:
xsk: Add missing overflow check in xdp_umem_reg
The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem->npgs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.106-64.140Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Jun 23, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.23-36.46Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64 | Jun 24, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linuxUpgrade linux-intel-iotgUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-ibm-5.15Upgrade linux-azure-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub