In the Linux kernel, the following vulnerability has been resolved:
selinux: check connect-related permissions on TCP Fast Open
Similar to Landlock, SELinux was not updated when TCP Fast Open support was introduced to ensure connect-related permissions are checked when using TCP Fast Open. Update its socket_sendmsg() hook to call selinux_socket_connect() when MSG_FASTOPEN is passed.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-develUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-coreUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade rvUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debugUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matched | Oct 11, 2026 | Sep 17, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.180-225.360Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfo | Sep 1, 2026 | Aug 15, 2026 |
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 20, 2026 | Aug 15, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade libperf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extra | Sep 23, 2026 | Sep 19, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-64k-7.0Upgrade linux-image-aws-64k-6.8Upgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1062-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-147-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1066-gkeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1067-awsUpgrade linux-image-virtual-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-gcp-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-oem-7.0Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-6.8.0-1066-gke-64kUpgrade linux-image-6.8.0-1067-aws-64kUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-7.0Upgrade linux-image-kvmUpgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-awsUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-6.8.0-1052-gkeopUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-oem-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1071-azureUpgrade linux-image-6.8.0-1071-gcp-64kUpgrade linux-image-6.8.0-1064-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azure-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-147-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-6.8.0-147-fipsUpgrade linux-image-6.8.0-1071-gcpUpgrade linux-image-gkeopUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-6.8.0-1064-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1067-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1071-azure-fipsUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-fipsUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-6.8.0-1071-gcp-fipsUpgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-7.0Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1069-azure-fdeUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-6.8.0-147-genericUpgrade linux-image-6.8.0-1067-ibmUpgrade linux-image-realtimeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-6.8.0-147-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 25, 2026 | Aug 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub