In the Linux kernel, the following vulnerability has been resolved:
ax25: properly unshare skbs in ax25_kiss_rcv()
Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d ("net: introduce per netns packet chains").
skb->dev becomes NULL and we crash in __netif_receive_skb_core().
Before above commit, different kind of bugs or corruptions could happen without a major crash.
But the root cause is that ax25_kiss_rcv() can queue/mangle input skb without checking if this skb is shared or not.
Many thanks to Bernard Pidoux for his help, diagnosis and tests.
We had a similar issue years ago fixed with commit 7aaed57c5c28 ("phonet: properly unshare skbs in phonet_rcv()").
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.193-133.214Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.153-175.280Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-modules-extra-common | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-extra | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-intelUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-virtualUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rt | Dec 5, 2025 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub