In the Linux kernel, the following vulnerability has been resolved:
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets.
When ppp_sync_txmung receives an incoming package with an empty payload: (remote) gef➤ p *(struct pppoe_hdr *) (skb->head + skb->network_header) $18 = { type = 0x1, ver = 0x1, code = 0x0, sid = 0x2, length = 0x0, tag = 0xffff8880371cdb96 }
from the skb struct (trimmed) tail = 0x16, end = 0x140, head = 0xffff88803346f400 "4", data = 0xffff88803346f416 ":\377", truesize = 0x380, len = 0x0, data_len = 0x0, mac_len = 0xe, hdr_len = 0x0,
it is not safe to access data[2].
[[email protected]: fixed subj typo]
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-rt-64k-modules-extraUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade rvUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-core | May 27, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.10.253-251.1014 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 26, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 20, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-debuginfoUpgrade rvUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390x | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-zfcpdump | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intelUpgrade linux-image-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1085-oracle | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub