The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
syzkaller found a memory leak in kcm_sendmsg(), and commit c821a88bd720 ("kcm: Fix memory leak in error path of kcm_sendmsg()") suppressed it by updating kcm_tx_msg(head)->last_skb if partial data is copied so that the following sendmsg() will resume from the skb.
However, we cannot know how many bytes were copied when we get the error. Thus, we could mess up the MSG_MORE queue.
When kcm_sendmsg() fails for SOCK_DGRAM, we should purge the queue as we do so for UDP by udp_flush_pending_frames().
Even without this change, when the error occurred, the following sendmsg() resumed from a wrong skb and the queue was messed up. However, we have yet to get such a report, and only syzkaller stumbled on it. So, this can be changed safely.
Note this does not change SOCK_SEQPACKET behaviour.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.196-185.743Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.55-75.123Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perf | Jan 12, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-realtimeUpgrade linux-azure-fdeUpgrade linux-gcpUpgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-azure-5.4Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-nvidia-tegra-igxUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linux-azure-fipsUpgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-gcp-5.4Upgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-hwe-5.15 | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub