In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: use skb_header_pointer_careful()
skb_header_pointer() does not fully validate negative @offset values.
Use skb_header_pointer_careful() instead.
GangMin Kim provided a report and a repro fooling u32_classify():
BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0 net/sched/cls_u32.c:221
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-modulesUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-toolsUpgrade rtlaUpgrade kernel-rt-64k-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-modules | Mar 31, 2026 | Mar 30, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.10.258-257.1041Upgrade python-perfUpgrade kernel-livepatch-5.15.209-147.245Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-debuginfo | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.1.168-202.320Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade perfUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12Upgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel6.12-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.73-95.123Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel-debuginfoUpgrade kernel6.12-tools-develUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-modules-extraUpgrade perf6.12 | Mar 27, 2026 | Feb 14, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Mar 31, 2026 | Feb 14, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-modules-extra-matchedUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matched | Apr 8, 2026 | Apr 7, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-azure-cvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws | May 25, 2026 | May 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub