In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-headersUpgrade perfUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extra | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.238-231.953Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-livepatch-6.1.140-154.222Upgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfo | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade bpftool | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-hisilicon | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rt | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub