In the Linux kernel, the following vulnerability has been resolved:
net: ppp: Add bound checking for skb data on ppp_sync_txmung
Ensure we have enough data in linear buffer from skb before accessing initial bytes. This prevents potential out-of-bounds accesses when processing short packets.
When ppp_sync_txmung receives an incoming package with an empty payload: (remote) gef➤ p *(struct pppoe_hdr *) (skb->head + skb->network_header) $18 = { type = 0x1, ver = 0x1, code = 0x0, sid = 0x2, length = 0x0, tag = 0xffff8880371cdb96 }
from the skb struct (trimmed) tail = 0x16, end = 0x140, head = 0xffff88803346f400 "4", data = 0xffff88803346f416 ":\377", truesize = 0x380, len = 0x0, data_len = 0x0, mac_len = 0xe, hdr_len = 0x0,
it is not safe to access data[2].
[[email protected]: fixed subj typo]
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade rvUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-core | May 27, 2025 | May 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.253-251.1014Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 26, 2025 | May 1, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 20, 2025 | May 1, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-modules-extra-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade perfUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-intelUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-xilinxUpgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-fips-5.15 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub