In the Linux kernel, the following vulnerability has been resolved:
dccp: Fix out of bounds access in DCCP error handler
There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-oracle-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-intel-iotgUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-fipsUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-aws | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub