In the Linux kernel, the following vulnerability has been resolved:
xsk: fix an integer overflow in xp_create_and_assign_umem()
Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64kUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rtUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matched | Jun 13, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.22-27.96Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-headersUpgrade kernelUpgrade kernel6.12-modules-extraUpgrade python3-perf | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 10, 2025 | Apr 3, 2025 |
| Rocky_linux | — | Upgrade libperf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extra | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-default | Dec 5, 2025 | Jun 11, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-azure-fde-edgeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.11 | Jun 26, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub