In the Linux kernel, the following vulnerability has been resolved:
gro: fix ownership transfer
If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. This is an issue as their destructor was removed in skb_gro_receive_list but not the reference to their socket, and then they can't be orphaned. Fix this by also removing the reference to the socket.
For example this could be observed,
kernel BUG at include/linux/skbuff.h:3131! (skb_orphan) RIP: 0010:ip6_rcv_core+0x11bc/0x19a0 Call Trace: ipv6_list_rcv+0x250/0x3f0 __netif_receive_skb_list_core+0x49d/0x8f0 netif_receive_skb_list_internal+0x634/0xd40 napi_complete_done+0x1d2/0x7d0 gro_cell_poll+0x118/0x1f0
A similar construction is found in skb_gro_receive, apply the same change there.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade rvUpgrade perfUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade bpftool | Jul 3, 2024 | May 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-devel | May 22, 2025 | May 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernelUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Jun 11, 2025 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 3, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debuginfo | Jul 16, 2024 | May 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt | Aug 8, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-aws | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub