In the Linux kernel, the following vulnerability has been resolved:
gro: fix ownership transfer
If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. This is an issue as their destructor was removed in skb_gro_receive_list but not the reference to their socket, and then they can't be orphaned. Fix this by also removing the reference to the socket.
For example this could be observed,
kernel BUG at include/linux/skbuff.h:3131! (skb_orphan) RIP: 0010:ip6_rcv_core+0x11bc/0x19a0 Call Trace: ipv6_list_rcv+0x250/0x3f0 __netif_receive_skb_list_core+0x49d/0x8f0 netif_receive_skb_list_internal+0x634/0xd40 napi_complete_done+0x1d2/0x7d0 gro_cell_poll+0x118/0x1f0
A similar construction is found in skb_gro_receive, apply the same change there.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade perfUpgrade kernel-zfcpdump-modules-core | Jul 3, 2024 | May 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel | May 22, 2025 | May 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-libbpfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfo | Jun 11, 2025 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool | Jul 16, 2024 | May 19, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azure | Aug 8, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-64k | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub