The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_api: fix error handling causing NULL dereference
tcf_exts_miss_cookie_base_alloc() calls xa_alloc_cyclic() which can return 1 if the allocation succeeded after wrapping. This was treated as an error, with value 1 returned to caller tcf_exts_init_ex() which sets exts->actions to NULL and returns 1 to caller fl_change().
fl_change() treats err == 1 as success, calling tcf_exts_validate_ex() which calls tcf_action_init() with exts->actions as argument, where it is dereferenced.
Example trace:
BUG: kernel NULL pointer dereference, address: 0000000000000000 CPU: 114 PID: 16151 Comm: handler114 Kdump: loaded Not tainted 5.14.0-503.16.1.el9_5.x86_64 #1 RIP: 0010:tcf_action_init+0x1f8/0x2c0 Call Trace: tcf_action_init+0x1f8/0x2c0 tcf_exts_validate_ex+0x175/0x190 fl_change+0x537/0x1120 [cls_flower]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 3, 2025 | Mar 12, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Mar 12, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-modules-extra-matchedUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfo | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-rt-optional | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-gkeop-6.8 | May 21, 2025 | Mar 12, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub