In the Linux kernel, the following vulnerability has been resolved:
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPC_NL_UDP_GET_REMOTEIP with media name set to tun
tipc: Started in network mode tipc: Node identity 8af312d38a21, cluster identity 4711 tipc: Enabled bearer <eth:syz_tun>, priority 1 Oops: general protection fault KASAN: null-ptr-deref in range CPU: 1 UID: 1000 PID: 559 Comm: poc Not tainted 6.16.0-rc1+ #117 PREEMPT Hardware name: QEMU Ubuntu 24.04 PC RIP: 0010:tipc_udp_nl_dump_remoteip+0x4a4/0x8f0
the ub was in fact a struct dev.
when bid != 0 && skip_cnt != 0, bearer_list[bid] may be NULL or other media when other thread changes it.
fix this by checking media_id.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 7, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade dtb-lgUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-appleUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-default-devel | Dec 5, 2025 | Sep 12, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-ibmUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-ibm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinxUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-5.15.0-1087-intel-iotg | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 3, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub