In the Linux kernel, the following vulnerability has been resolved:
ax25: properly unshare skbs in ax25_kiss_rcv()
Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d ("net: introduce per netns packet chains").
skb->dev becomes NULL and we crash in __netif_receive_skb_core().
Before above commit, different kind of bugs or corruptions could happen without a major crash.
But the root cause is that ax25_kiss_rcv() can queue/mangle input skb without checking if this skb is shared or not.
Many thanks to Bernard Pidoux for his help, diagnosis and tests.
We had a similar issue years ago fixed with commit 7aaed57c5c28 ("phonet: properly unshare skbs in phonet_rcv()").
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.193-133.214Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.153-175.280Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-docs-html | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1049-nvidia-tegra-rt | Dec 5, 2025 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub