In the Linux kernel, the following vulnerability has been resolved:
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
The reproduction steps: 1. create a tun interface 2. enable l2 bearer 3. TIPC_NL_UDP_GET_REMOTEIP with media name set to tun
tipc: Started in network mode tipc: Node identity 8af312d38a21, cluster identity 4711 tipc: Enabled bearer <eth:syz_tun>, priority 1 Oops: general protection fault KASAN: null-ptr-deref in range CPU: 1 UID: 1000 PID: 559 Comm: poc Not tainted 6.16.0-rc1+ #117 PREEMPT Hardware name: QEMU Ubuntu 24.04 PC RIP: 0010:tipc_udp_nl_dump_remoteip+0x4a4/0x8f0
the ub was in fact a struct dev.
when bid != 0 && skip_cnt != 0, bearer_list[bid] may be NULL or other media when other thread changes it.
fix this by checking media_id.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.239-236.958Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 7, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Nov 21, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 4, 2025 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rtUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-apm | Dec 5, 2025 | Sep 12, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-5.15Upgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-aws-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinxUpgrade linux-image-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-virtualUpgrade linux-image-xilinx-6.8 | Jul 9, 2025 | Jul 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 3, 2025 | Jul 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub