In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade python3-perfUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-docUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade bpftool | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfo | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfo | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-preemptUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade dtb-rockchip | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-nvidia-5.15Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1085-gke | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub