In the Linux kernel, the following vulnerability has been resolved:
genetlink: fix genl_bind() invoking bind() after -EPERM
Per family bind/unbind callbacks were introduced to allow families to track multicast group consumer presence, e.g. to start or stop producing events depending on listeners.
However, in genl_bind() the bind() callback was invoked even if capability checks failed and ret was set to -EPERM. This means that callbacks could run on behalf of unauthorized callers while the syscall still returned failure to user space.
Fix this by only invoking bind() after "if (ret) break;" check i.e. after permission checks have succeeded.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.48-67.114Upgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-develUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfo | Dec 9, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-mediatek | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub