In the Linux kernel, the following vulnerability has been resolved:
xsk: fix an integer overflow in xp_create_and_assign_umem()
Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade perfUpgrade libperfUpgrade kernel-headersUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64kUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug | Jun 13, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.22-27.96Upgrade kernelUpgrade kernel-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.132-147.221Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64 | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 10, 2025 | Apr 3, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade rtla | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade kernel-64kb | Dec 5, 2025 | Jun 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-6.11Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-awsUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-gkeUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.11.0-28-generic-64k | Jun 26, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub