In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade bpftoolUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.238-231.953Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.140-154.222Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-tools | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-default | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-intelUpgrade linux-image-gcp-5.15Upgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-5.15Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcpUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-hwe-20.04 | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub