In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade libperfUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-tools-libs | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftoolUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python3-perf | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-appleUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-apm | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-azure-cvmUpgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub