In the Linux kernel, the following vulnerability has been resolved:
xsk: tighten UMEM headroom validation to account for tailroom and min frame
The current headroom validation in xdp_umem_reg() could leave us with insufficient space dedicated to even receive minimum-sized ethernet frame. Furthermore if multi-buffer would come to play then skb_shared_info stored at the end of XSK frame would be corrupted.
HW typically works with 128-aligned sizes so let us provide this value as bare minimum.
Multi-buffer setting is known later in the configuration process so besides accounting for 128 bytes, let us also take care of tailroom space upfront.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-livepatch-5.15.209-147.245Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade python-perfUpgrade bpftool | Jun 23, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-gke-64kUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1061-aws-64k | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub