In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: avoid invalid read in irdma_net_event
irdma_net_event() should not dereference anything from "neigh" (alias "ptr") until it has checked that the event is NETEVENT_NEIGH_UPDATE. Other events come with different structures pointed to by "ptr" and they may be smaller than struct neighbour.
Move the read of neigh->dev under the NETEVENT_NEIGH_UPDATE case.
The bug is mostly harmless, but it triggers KASAN on debug kernels:
BUG: KASAN: stack-out-of-bounds in irdma_net_event+0x32e/0x3b0 [irdma] Read of size 8 at addr ffffc900075e07f0 by task kworker/27:2/542554
CPU: 27 PID: 542554 Comm: kworker/27:2 Kdump: loaded Not tainted 5.14.0-630.el9.x86_64+debug #1 Hardware name: [...] Workqueue: events rt6_probe_deferred Call Trace: <IRQ> dump_stack_lvl+0x60/0xb0 print_address_description.constprop.0+0x2c/0x3f0 print_report+0xb4/0x270 kasan_report+0x92/0xc0 irdma_net_event+0x32e/0x3b0 [irdma] notifier_call_chain+0x9e/0x180 atomic_notifier_call_chain+0x5c/0x110 rt6_do_redirect+0xb91/0x1080 tcp_v6_err+0xe9b/0x13e0 icmpv6_notify+0x2b2/0x630 ndisc_redirect_rcv+0x328/0x530 icmpv6_rcv+0xc16/0x1360 ip6_protocol_deliver_rcu+0xb84/0x12e0 ip6_input_finish+0x117/0x240 ip6_input+0xc4/0x370 ipv6_rcv+0x420/0x7d0 __netif_receive_skb_one_core+0x118/0x1b0 process_backlog+0xd1/0x5d0 __napi_poll.constprop.0+0xa3/0x440 net_rx_action+0x78a/0xba0 handle_softirqs+0x2d4/0x9c0 do_softirq+0xad/0xe0 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Jan 14, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 14, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-5.15.0-173-genericUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.17.0-1013-azureUpgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtime-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-6.17Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1052-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-ibm-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.17.0-1020-oemUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-azure-6.17Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04dUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-6.17Upgrade linux-image-kvm-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.17.0-1012-awsUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-5.15.0-1103-awsUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-raspi-6.17Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-1054-azure | Mar 17, 2026 | Jan 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | Jan 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub