In the Linux kernel, the following vulnerability has been resolved:
ax25: properly unshare skbs in ax25_kiss_rcv()
Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d ("net: introduce per netns packet chains").
skb->dev becomes NULL and we crash in __netif_receive_skb_core().
Before above commit, different kind of bugs or corruptions could happen without a major crash.
But the root cause is that ax25_kiss_rcv() can queue/mangle input skb without checking if this skb is shared or not.
Many thanks to Bernard Pidoux for his help, diagnosis and tests.
We had a similar issue years ago fixed with commit 7aaed57c5c28 ("phonet: properly unshare skbs in phonet_rcv()").
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.193-133.214Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.153-175.280Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfo | Sep 30, 2025 | Sep 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinxUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-awsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-ibm-5.15Upgrade linux-image-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04 | Dec 5, 2025 | Sep 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub