In the Linux kernel, the following vulnerability has been resolved:
netlink: avoid infinite retry looping in netlink_unicast()
netlink_attachskb() checks for the socket's read memory allocation constraints. Firstly, it has:
rmem < READ_ONCE(sk->sk_rcvbuf)
to check if the just increased rmem value fits into the socket's receive buffer. If not, it proceeds and tries to wait for the memory under:
rmem + skb->truesize > READ_ONCE(sk->sk_rcvbuf)
The checks don't cover the case when skb->truesize + sk->sk_rmem_alloc is equal to sk->sk_rcvbuf. Thus the function neither successfully accepts these conditions, nor manages to reschedule the task - and is called in retry loop for indefinite time which is caught as:
rcu: INFO: rcu_sched self-detected stall on CPU rcu: 0-....: (25999 ticks this GP) idle=ef2/1/0x4000000000000000 softirq=262269/262269 fqs=6212 (t=26000 jiffies g=230833 q=259957) NMI backtrace for cpu 0 CPU: 0 PID: 22 Comm: kauditd Not tainted 5.10.240 #68 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-4.fc42 04/01/2014 Call Trace: <IRQ> dump_stack lib/dump_stack.c:120 nmi_cpu_backtrace.cold lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace lib/nmi_backtrace.c:62 rcu_dump_cpu_stacks kernel/rcu/tree_stall.h:335 rcu_sched_clock_irq.cold kernel/rcu/tree.c:2590 update_process_times kernel/time/timer.c:1953 tick_sched_handle kernel/time/tick-sched.c:227 tick_sched_timer kernel/time/tick-sched.c:1399 __hrtimer_run_queues kernel/time/hrtimer.c:1652 hrtimer_interrupt kernel/time/hrtimer.c:1717 __sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 asm_call_irq_on_stack arch/x86/entry/entry_64.S:808 </IRQ>
netlink_attachskb net/netlink/af_netlink.c:1234 netlink_unicast net/netlink/af_netlink.c:1349 kauditd_send_queue kernel/audit.c:776 kauditd_thread kernel/audit.c:897 kthread kernel/kthread.c:328 ret_from_fork arch/x86/entry/entry_64.S:304
Restore the original behavior of the check which commit in Fixes accidentally missed when restructuring the code.
Found by Linux Verification Center (linuxtesting.org).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.240-238.966Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.189-131.211Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-develUpgrade kernel-toolsUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.148-173.267Upgrade bpftool6.12Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.40-64.114Upgrade kernel-develUpgrade kernel6.12-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel6.12-toolsUpgrade kernel-headers | Oct 16, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 4, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-default-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1098-azure-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1090-intel-iotgUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-5.15Upgrade linux-image-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1091-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1089-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1094-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1095-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1078-gkeopUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1047-nvidia-tegraUpgrade linux-image-oem-20.04cUpgrade linux-image-fips-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-160-fipsUpgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1095-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1095-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1092-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-160-genericUpgrade linux-image-kvmUpgrade linux-image-azure-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1047-nvidia-tegra-rtUpgrade linux-image-5.15.0-160-lowlatencyUpgrade linux-image-5.15.0-1098-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1095-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1089-raspiUpgrade linux-image-5.15.0-1090-nvidiaUpgrade linux-image-virtual-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1087-intel-iot-realtimeUpgrade linux-image-5.15.0-1095-aws-fipsUpgrade linux-image-5.15.0-1036-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1036-nvidia-tegra-igxUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-160-generic-lpaeUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1090-nvidia-lowlatencyUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-160-generic-64kUpgrade linux-image-5.15.0-1059-xilinx-zynqmpUpgrade linux-image-5.15.0-160-lowlatency-64k | Oct 21, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub