In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_queue: hold bridge skb->dev while queued
br_pass_frame_up() rewrites skb->dev from the ingress port to the bridge master before queueing bridge LOCAL_IN packets. NFQUEUE only holds references on state.in/out and bridge physdevs, so a queued bridge packet can retain a freed bridge master in skb->dev until reinjection.
When the verdict is reinjected later, br_netif_receive_skb() re-enters the receive path with skb->dev still pointing at the freed bridge master, triggering a use-after-free.
Store skb->dev in the queue entry, hold a reference on it for the queue lifetime, and use the saved device when dropping queued packets during NETDEV_DOWN handling.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-5.10.259-258.1043Upgrade kernel-livepatch-5.15.209-147.245Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-headersUpgrade kernel6.18Upgrade kernel-livepatch-6.18.35-68.127Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade perf6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18-toolsUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade python3-perf6.18Upgrade microvm-kernel6.18Upgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18 | Jul 8, 2026 | Jun 24, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-modules-extra | Sep 28, 2026 | Sep 26, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-oracle-7.0Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-7.0Upgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.0-1064-awsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-azure-fde-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-raspi-7.0Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-6.8.0-1064-aws-64kUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-24.04dUpgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1067-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-gke-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-6.8.0-139-fipsUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-26.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-7.0Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1064-aws-fipsUpgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-realtime-5.15Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-7.0Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-139-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-7.0Upgrade linux-image-virtual-5.15Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-azureUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-azure-fips-6.8 | Jul 20, 2026 | Jun 24, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub