In the Linux kernel, the following vulnerability has been resolved:
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
get_netdev_for_sock() is called during setsockopt(), so not under RCU.
Using sk_dst_get(sk)->dev could trigger UAF.
Let's use __sk_dst_get() and dst_dev_rcu().
Note that the only ->ndo_sk_get_lower_dev() user is bond_sk_get_lower_dev(), which uses RCU.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.66-88.122Upgrade bpftool6.12Upgrade kernel6.12-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpfUpgrade perfUpgrade kernel-livepatch-6.1.161-183.298Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-develUpgrade bpftoolUpgrade kernel6.12-libbpfUpgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel6.12-libbpf-staticUpgrade kernel-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12 | Mar 27, 2026 | Nov 12, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 11, 2026 | Feb 11, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2026 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 17, 2026 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade libperf | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-5.15Upgrade linux-image-raspi-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-gcp-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-oem-6.17Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-176-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-virtual-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1105-awsUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-aws-6.17Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-generic-6.17Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-oracle-6.17 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub