In the Linux kernel, the following vulnerability has been resolved:
net/sched: act_mirred: don't override retval if we already lost the skb
If we're redirecting the skb, and haven't called tcf_mirred_forward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcf_mirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF.
Move the retval override to the error path which actually need it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-develUpgrade perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug | Nov 4, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.238-231.953 | May 30, 2025 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headers | Aug 5, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Apr 3, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-debug-vdso | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-fips | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub