In the Linux kernel, the following vulnerability has been resolved:
media: dvb-net: fix OOB access in ULE extension header tables
The ule_mandatory_ext_handlers[] and ule_optional_ext_handlers[] tables in handle_one_ule_extension() are declared with 255 elements (valid indices 0-254), but the index htype is derived from network-controlled data as (ule_sndu_type & 0x00FF), giving a range of 0-255. When htype equals 255, an out-of-bounds read occurs on the function pointer table, and the OOB value may be called as a function pointer.
Add a bounds check on htype against the array size before either table is accessed. Out-of-range values now cause the SNDU to be discarded.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-kvm-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-4.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1162-awsUpgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-5.4.0-1167-azureUpgrade linux-image-4.15.0-254-lowlatencyUpgrade linux-image-4.15.0-254-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-5.4Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-5.4Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1205-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-5.4Upgrade linux-image-gcp-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-4.15Upgrade linux-image-bluefield-5.4Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oracle-6.17Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-5.4.0-1160-oracleUpgrade linux-image-4.15.0-1150-fipsUpgrade linux-image-3.13.0-215-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-aws-5.15Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-234-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.17Upgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-snapdragon-5.4Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1163-aws-fipsUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-5.4Upgrade linux-image-awsUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.4.0-234-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-5.4.0-234-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-fips-5.4Upgrade linux-image-azure-fips-5.4Upgrade linux-image-5.4.0-1121-bluefieldUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-4.4.0-1127-fipsUpgrade linux-image-4.15.0-2096-gcp-fipsUpgrade linux-image-virtual-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-azure-6.17Upgrade linux-image-azure-5.4Upgrade linux-image-6.17.0-1020-oracle-64kUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-4.4.0-1195-awsUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-lowlatency-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.17.0-1022-azureUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-4.4.0-284-lowlatencyUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.17.0-1019-realtimeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-6.17Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-4.4.0-1158-kvmUpgrade linux-image-5.4.0-1167-azure-fipsUpgrade linux-image-6.17.0-1022-gcp-64kUpgrade linux-image-azure-4.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-2133-aws-fipsUpgrade linux-image-5.4.0-1080-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.17Upgrade linux-image-azureUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.17Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-3.13.0-215-genericUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.17.0-1032-oemUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-5.4.0-1136-fipsUpgrade linux-image-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-4.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-5.4Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-generic-lts-trustyUpgrade linux-image-6.17.0-42-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-2113-azure-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1108-ibmUpgrade linux-image-serverUpgrade linux-image-oem-6.17Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-6.17Upgrade linux-image-5.4.0-1066-iotUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-4.15.0-1195-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.4.0-1165-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.4.0-1165-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1177-kvmUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1145-raspiUpgrade linux-image-5.4.0-1161-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.17.0-1022-gcpUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.17.0-42-genericUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.4.0-1149-kvmUpgrade linux-image-4.4.0-284-genericUpgrade linux-image-gcp-5.4Upgrade linux-image-4.4.0-1157-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-virtual-6.17Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.17.0-1020-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-4.15.0-1158-oracleUpgrade linux-image-4.15.0-1188-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04b | Jul 20, 2026 | Apr 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub