In the Linux kernel, the following vulnerability has been resolved:
gro: fix ownership transfer
If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. This is an issue as their destructor was removed in skb_gro_receive_list but not the reference to their socket, and then they can't be orphaned. Fix this by also removing the reference to the socket.
For example this could be observed,
kernel BUG at include/linux/skbuff.h:3131! (skb_orphan) RIP: 0010:ip6_rcv_core+0x11bc/0x19a0 Call Trace: ipv6_list_rcv+0x250/0x3f0 __netif_receive_skb_list_core+0x49d/0x8f0 netif_receive_skb_list_internal+0x634/0xd40 napi_complete_done+0x1d2/0x7d0 gro_cell_poll+0x118/0x1f0
A similar construction is found in skb_gro_receive, apply the same change there.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade rvUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-rt-core | Jul 3, 2024 | May 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.156-102.160Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | May 22, 2025 | May 19, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headers | Jun 11, 2025 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 3, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-tools-libs-devel | Jul 16, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-devel | Aug 8, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-gcpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub