In the Linux kernel, the following vulnerability has been resolved:
ipvlan: ensure network headers are in skb linear part
syzbot found that ipvlan_process_v6_outbound() was assuming the IPv6 network header isis present in skb->head [1]
Add the needed pskb_network_may_pull() calls for both IPv4 and IPv6 handlers.
[1] BUG: KMSAN: uninit-value in __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 __ipv6_addr_type+0xa2/0x490 net/ipv6/addrconf_core.c:47 ipv6_addr_type include/net/ipv6.h:555 [inline] ip6_route_output_flags_noref net/ipv6/route.c:2616 [inline] ip6_route_output_flags+0x51/0x720 net/ipv6/route.c:2651 ip6_route_output include/net/ip6_route.h:93 [inline] ipvlan_route_v6_outbound+0x24e/0x520 drivers/net/ipvlan/ipvlan_core.c:476 ipvlan_process_v6_outbound drivers/net/ipvlan/ipvlan_core.c:491 [inline] ipvlan_process_outbound drivers/net/ipvlan/ipvlan_core.c:541 [inline] ipvlan_xmit_mode_l3 drivers/net/ipvlan/ipvlan_core.c:605 [inline] ipvlan_queue_xmit+0xd72/0x1780 drivers/net/ipvlan/ipvlan_core.c:671 ipvlan_start_xmit+0x5b/0x210 drivers/net/ipvlan/ipvlan_main.c:223 __netdev_start_xmit include/linux/netdevice.h:5150 [inline] netdev_start_xmit include/linux/netdevice.h:5159 [inline] xmit_one net/core/dev.c:3735 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3751 sch_direct_xmit+0x399/0xd40 net/sched/sch_generic.c:343 qdisc_restart net/sched/sch_generic.c:408 [inline] __qdisc_run+0x14da/0x35d0 net/sched/sch_generic.c:416 qdisc_run+0x141/0x4d0 include/net/pkt_sched.h:127 net_tx_action+0x78b/0x940 net/core/dev.c:5484 handle_softirqs+0x1a0/0x7c0 kernel/softirq.c:561 __do_softirq+0x14/0x1a kernel/softirq.c:595 do_softirq+0x9a/0x100 kernel/softirq.c:462 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:389 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:919 [inline] __dev_queue_xmit+0x2758/0x57d0 net/core/dev.c:4611 dev_queue_xmit include/linux/netdevice.h:3311 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3132 [inline] packet_sendmsg+0x93e0/0xa7e0 net/packet/af_packet.c:3164 sock_sendmsg_nosec net/socket.c:718 [inline]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-common | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Aug 13, 2025 | Jun 30, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-devel | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-generic-6.8Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1015-azure-fde | May 21, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub