In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade rtlaUpgrade kernel-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-core | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernelUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-devel | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotg-5.15 | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub