In the Linux kernel, the following vulnerability has been resolved:
xfrm: account XFRMA_IF_ID in aevent size calculation
xfrm_get_ae() allocates the reply skb with xfrm_aevent_msgsize(), then build_aevent() appends attributes including XFRMA_IF_ID when x->if_id is set.
xfrm_aevent_msgsize() does not include space for XFRMA_IF_ID. For states with if_id, build_aevent() can fail with -EMSGSIZE and hit BUG_ON(err < 0) in xfrm_get_ae(), turning a malformed netlink interaction into a kernel panic.
Account XFRMA_IF_ID in the size calculation unconditionally and replace the BUG_ON with normal error unwinding.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-virtual | May 25, 2026 | May 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 10, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub