In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: extend RCU protection in igmp6_send()
igmp6_send() can be called without RTNL or RCU being held.
Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF.
Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep.
Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64kUpgrade kernel-modulesUpgrade kernel-rt-64kUpgrade kernel-coreUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-rtUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-docUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-kvm | Jul 14, 2025 | Feb 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.355-276.639Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-5.15.180-122.191Upgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.236-227.928 | Apr 30, 2025 | Feb 27, 2025 |
| Amazon_linux | — | Upgrade kernel | May 22, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-livepatch-6.1.134-150.224Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra | Apr 30, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Jul 1, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debuginfo-common-x86_64Upgrade rtlaUpgrade libperf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade libperf | Feb 5, 2026 | Sep 8, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-64kb-extra | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-genericUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-oem-24.04b | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub