In the Linux kernel, the following vulnerability has been resolved:
ipvlan: ensure network headers are in skb linear part
syzbot found that ipvlan_process_v6_outbound() was assuming the IPv6 network header isis present in skb->head [1]
Add the needed pskb_network_may_pull() calls for both IPv4 and IPv6 handlers.
[1] BUG: KMSAN: uninit-value in __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 ipv6_addr_type include/net/ipv6.h:555 [inline] ip6_route_output_flags_noref net/ipv6/route.c:2616 [inline] ip6_route_output_flags+0x51/0x720 net/ipv6/route.c:2651 ip6_route_output include/net/ip6_route.h:93 [inline] ipvlan_route_v6_outbound+0x24e/0x520 drivers/net/ipvlan/ipvlan_core.c:476 ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:491 [inline] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:541 [inline] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:605 [inline] ipvlan_queue_xmit+0xd72/0x1780 drivers/net/ipvlan/ipvlan_core.c:671 ipvlan_start_xmit+0x5b/0x210 drivers/net/ipvlan/ipvlan_main.c:223 __netdev_start_xmit include/linux/netdevice.h:5150 [inline] netdev_start_xmit include/linux/netdevice.h:5159 [inline] xmit_one net/core/dev.c:3735 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3751 sch_direct_xmit+0x399/0xd40 net/sched/sch_generic.c:343 qdisc_restart net/sched/sch_generic.c:408 [inline] __qdisc_run+0x14da/0x35d0 net/sched/sch_generic.c:416 qdisc_run+0x141/0x4d0 include/net/pkt_sched.h:127 net_tx_action+0x78b/0x940 net/core/dev.c:5484 handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:561 __do_softirq+0x14/0x1a kernel/softirq.c:595 do_softirq+0x9a/0x100 kernel/softirq.c:462 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x2758/0x57d0 net/core/dev.c:4611 dev_queue_xmit include/linux/netdevice.h:3311 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3132 [inline] packet_sendmsg+0x93e0/0xa7e0 net/packet/af_packet.c:3164 sock_sendmsg_nosec net/socket.c:718 [inline]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.130-139.222Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headers | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade dtb-appleUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dlm-kmp-rt | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-awsUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1036-azure | May 21, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub