In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix possible UAF in macvlan_forward_source()
Add RCU protection on (struct macvlan_source_entry)->vlan.
Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointer before RCU grace period starts.
This allows macvlan_forward_source() to skip over entries queued for freeing.
Note that macvlan_dev are already RCU protected, as they are embedded in a standard netdev (netdev_priv(ndev)).
https: //lore.kernel.org/netdev/[email protected]/T/#u
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-develUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-64kUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64kUpgrade kernel-rt-64k-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-modulesUpgrade kernel-core | Mar 12, 2026 | Mar 9, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.201-140.219Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.251-248.983 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-develUpgrade perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade perfUpgrade python3-perf6.12Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.1.163-186.299Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel6.12-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel6.12-tools | Mar 9, 2026 | Jan 25, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 10, 2026 | Jan 25, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Mar 10, 2026 | Jan 25, 2026 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-devel | Mar 31, 2026 | Mar 26, 2026 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-symsUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kselftests-kmp-rt | Feb 12, 2026 | Feb 12, 2026 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-azure-6.17Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-intelUpgrade linux-image-realtime-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibmUpgrade linux-image-xilinxUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-nvidia-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-176-fipsUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-azure-fde-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.17Upgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-6.17Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-awsUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-lowlatency-64k-5.15 | Apr 10, 2026 | Jan 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub