In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: cortina: Make RX SKB per-port
The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both.
Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead.
Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped.
Zero it in some place where not strictly necessary just to emphasize what is going on.
This was found by Sashiko during normal patch review.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-7.0Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-aws-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-oem-20.04dUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspi-7.0Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-azure-5.15Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-7.0Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-azure-7.0Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-5.15 | Jul 21, 2026 | Jul 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub