In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix out-of-bounds access in ipv6_find_tlv()
optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.184-174.730Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.117-72.142Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf | Nov 6, 2025 | Oct 22, 2025 |
| Debian | — | Upgrade linux | Oct 24, 2025 | Oct 24, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernel | Feb 24, 2026 | Oct 22, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Oct 22, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-nvidia-tegra-igxUpgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-iotUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-raspiUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linux-intel-iotgUpgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.15 | Oct 28, 2025 | Oct 24, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub