In the Linux kernel, the following vulnerability has been resolved:
net: sched: act_csum: validate nested VLAN headers
tcf_csum_act() walks nested VLAN headers directly from skb->data when an skb still carries in-payload VLAN tags. The current code reads vlan->h_vlan_encapsulated_proto and then pulls VLAN_HLEN bytes without first ensuring that the full VLAN header is present in the linear area.
If only part of an inner VLAN header is linearized, accessing h_vlan_encapsulated_proto reads past the linear area, and the following skb_pull(VLAN_HLEN) may violate skb invariants.
Fix this by requiring pskb_may_pull(skb, VLAN_HLEN) before accessing and pulling each nested VLAN header. If the header still is not fully available, drop the packet through the existing error path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-64k-develUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-64kUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-rt-64kUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade libperfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-core | May 28, 2026 | May 28, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.258-257.1041Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 3, 2026 | Apr 25, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade libperf-debuginfoUpgrade bpftoolUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade rtlaUpgrade perfUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug | Jun 1, 2026 | May 31, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-xilinxUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-22.04 | May 25, 2026 | Apr 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 8, 2026 | Apr 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub