In the Linux kernel, the following vulnerability has been resolved:
ipv6: annotate data-race in ndisc_router_discovery()
syzbot found that ndisc_router_discovery() could read and write in6_dev->ra_mtu without holding a lock [1]
This looks fine, IFLA_INET6_RA_MTU is best effort.
Add READ_ONCE()/WRITE_ONCE() to document the race.
Note that we might also reject illegal MTU values (mtu < IPV6_MIN_MTU || mtu > skb->dev->mtu) in a future patch.
[1] BUG: KCSAN: data-race in ndisc_router_discovery / ndisc_router_discovery
read to 0xffff888119809c20 of 4 bytes by task 25817 on cpu 1: ndisc_router_discovery+0x151d/0x1c90 net/ipv6/ndisc.c:1558 ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841 icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989 ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438 ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489 NF_HOOK include/linux/netfilter.h:318 [inline] ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500 ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590 dst_input include/net/dst.h:474 [inline] ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79 ...
write to 0xffff888119809c20 of 4 bytes by task 25816 on cpu 0: ndisc_router_discovery+0x155a/0x1c90 net/ipv6/ndisc.c:1559 ndisc_rcv+0x2ad/0x3d0 net/ipv6/ndisc.c:1841 icmpv6_rcv+0xe5a/0x12f0 net/ipv6/icmp.c:989 ip6_protocol_deliver_rcu+0xb2a/0x10d0 net/ipv6/ip6_input.c:438 ip6_input_finish+0xf0/0x1d0 net/ipv6/ip6_input.c:489 NF_HOOK include/linux/netfilter.h:318 [inline] ip6_input+0x5e/0x140 net/ipv6/ip6_input.c:500 ip6_mc_input+0x27c/0x470 net/ipv6/ip6_input.c:590 dst_input include/net/dst.h:474 [inline] ip6_rcv_finish+0x336/0x340 net/ipv6/ip6_input.c:79 ...
value changed: 0x00000000 -> 0xe5400659
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.1.163-186.299Upgrade kernel6.12-modules-extra-commonUpgrade kernelUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.12.68-92.122Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-headersUpgrade python3-perf6.12-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel6.12-toolsUpgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfo | Mar 9, 2026 | Feb 14, 2026 |
| Debian | — | Upgrade linux | Feb 16, 2026 | Feb 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 13, 2026 | Feb 14, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 14, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-oem-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.17Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-azure-fde-6.17Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-oem-24.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-virtualUpgrade linux-image-aws-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-oem-6.17Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-realtime-6.17Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.17Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic | Apr 10, 2026 | Feb 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub