In the Linux kernel, the following vulnerability has been resolved:
ipvlan: ensure network headers are in skb linear part
syzbot found that ipvlan_process_v6_outbound() was assuming the IPv6 network header isis present in skb->head [1]
Add the needed pskb_network_may_pull() calls for both IPv4 and IPv6 handlers.
[1] BUG: KMSAN: uninit-value in __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 ipv6_addr_type include/net/ipv6.h:555 [inline] ip6_route_output_flags_noref net/ipv6/route.c:2616 [inline] ip6_route_output_flags+0x51/0x720 net/ipv6/route.c:2651 ip6_route_output include/net/ip6_route.h:93 [inline] ipvlan_route_v6_outbound+0x24e/0x520 drivers/net/ipvlan/ipvlan_core.c:476 ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:491 [inline] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:541 [inline] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:605 [inline] ipvlan_queue_xmit+0xd72/0x1780 drivers/net/ipvlan/ipvlan_core.c:671 ipvlan_start_xmit+0x5b/0x210 drivers/net/ipvlan/ipvlan_main.c:223 __netdev_start_xmit include/linux/netdevice.h:5150 [inline] netdev_start_xmit include/linux/netdevice.h:5159 [inline] xmit_one net/core/dev.c:3735 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3751 sch_direct_xmit+0x399/0xd40 net/sched/sch_generic.c:343 qdisc_restart net/sched/sch_generic.c:408 [inline] __qdisc_run+0x14da/0x35d0 net/sched/sch_generic.c:416 qdisc_run+0x141/0x4d0 include/net/pkt_sched.h:127 net_tx_action+0x78b/0x940 net/core/dev.c:5484 handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:561 __do_softirq+0x14/0x1a kernel/softirq.c:595 do_softirq+0x9a/0x100 kernel/softirq.c:462 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x2758/0x57d0 net/core/dev.c:4611 dev_queue_xmit include/linux/netdevice.h:3311 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3132 [inline] packet_sendmsg+0x93e0/0xa7e0 net/packet/af_packet.c:3164 sock_sendmsg_nosec net/socket.c:718 [inline]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftool | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-qcomUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rt | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04 | May 21, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub