In the Linux kernel, the following vulnerability has been resolved:
xsk: validate MTU against usable frame size on bind
AF_XDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk.
This becomes a problem since we started to respect tailroom which is subtracted from chunk_size (among with headroom). 2k chunk size might not provide enough space for standard 1500 MTU, so let us catch such settings at bind time. Furthermore, validate whether underlying HW will be able to satisfy configured MTU wrt XSK's frame size multiplied by supported Rx buffer chain length (that is exposed via net_device::xdp_zc_max_segs).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-laptop-23.10Upgrade linux-image-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.8 | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub