In the Linux kernel, the following vulnerability has been resolved:
xsk: fix an integer overflow in xp_create_and_assign_umem()
Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debugUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade libperfUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-64kUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade rtlaUpgrade kernel-rt-64k-coreUpgrade kernel-rt-core | Jun 13, 2025 | Apr 3, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.12.22-27.96Upgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel6.12 | Jun 24, 2025 | Apr 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 3, 2025 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 30, 2025 | Apr 3, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 10, 2025 | Apr 3, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade libperfUpgrade perfUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matched | Oct 6, 2025 | Oct 3, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-default | Dec 5, 2025 | Jun 11, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-6.11Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi | Jun 26, 2025 | Apr 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub