The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
tcp: tcp_make_synack() can be called from process context
tcp_rtx_synack() now could be called in process context as explained in 0a375c822497 ("tcp: tcp_rtx_synack() can be called from process context").
tcp_rtx_synack() might call tcp_make_synack(), which will touch per-CPU variables with preemption enabled. This causes the following BUG:
BUG: using __this_cpu_add() in preemptible [00000000] code: ThriftIO1/5464 caller is tcp_make_synack+0x841/0xac0 Call Trace: <TASK> dump_stack_lvl+0x10d/0x1a0 check_preemption_disabled+0x104/0x110 tcp_make_synack+0x841/0xac0 tcp_v6_send_synack+0x5c/0x450 tcp_rtx_synack+0xeb/0x1f0 inet_rtx_syn_ack+0x34/0x60 tcp_check_req+0x3af/0x9e0 tcp_rcv_state_process+0x59b/0x2030 tcp_v6_do_rcv+0x5f5/0x700 release_sock+0x3a/0xf0 tcp_sendmsg+0x33/0x40 ____sys_sendmsg+0x2f2/0x490 __sys_sendmsg+0x184/0x230 do_syscall_64+0x3d/0x90
Avoid calling __TCP_INC_STATS() with will touch per-cpu variables. Use TCP_INC_STATS() which is safe to be called from context switch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.311-233.529Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.104-63.140Upgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade perf | Aug 5, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-ibm-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-nvidia-tegraUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-aws | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub