In the Linux kernel, the following vulnerability has been resolved:
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
As Paolo said earlier [1]:
"Since the blamed commit below, classify can return TC_ACT_CONSUMED while the current skb being held by the defragmentation engine. As reported by GangMin Kim, if such packet is that may cause a UaF when the defrag engine later on tries to tuch again such packet."
act_ct was never meant to be used in the egress path, however some users are attaching it to egress today [2]. Attempting to reach a middle ground, we noticed that, while most qdiscs are not handling TC_ACT_CONSUMED, clsact/ingress qdiscs are. With that in mind, we address the issue by only allowing act_ct to bind to clsact/ingress qdiscs and shared blocks. That way it's still possible to attach act_ct to egress (albeit only with clsact).
[1] https://lore.kernel.org/netdev/674b8cbfc385c6f37fb29a1de08d8fe5c2b0fbee.1771321118.git.pabeni@redhat.com/ [2] https://lore.kernel.org/netdev/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade rvUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64kUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debugUpgrade kernel-64k-core | May 7, 2026 | May 4, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.204-143.230Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-libbpf-develUpgrade bpftool6.18-debuginfoUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-headersUpgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.12.77-99.140Upgrade kernel6.12-libbpf-develUpgrade kernel6.18-headersUpgrade perf6.12Upgrade kernel6.18-modules-extraUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.18-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf6.18Upgrade perf-debuginfoUpgrade kernel6.18-develUpgrade kernel-toolsUpgrade bpftool6.18Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perf6.18Upgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18Upgrade bpftool-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade perfUpgrade kernel6.18-toolsUpgrade kernel6.18-libbpfUpgrade kernel6.12-headersUpgrade kernel-tools-develUpgrade kernel6.18-tools-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.168-202.320Upgrade perf6.12-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64 | Apr 9, 2026 | Mar 18, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 7, 2026 | Mar 18, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 6, 2026 | Mar 18, 2026 |
| Rocky_linux | — | Upgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virt | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-intelUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-realtime-5.15Upgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp | Jul 20, 2026 | Mar 18, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub