In the Linux kernel, the following vulnerability has been resolved:
macvlan: inherit needed_headroom and needed_tailroom from lowerdev
macvlan devices inherit hard_header_len from lowerdev during macvlan_init(), but leave needed_headroom and needed_tailroom set to 0.
When the underlying lowerdev requires extra headroom or tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx headroom), upper layers calculating packet headroom and tailroom fail to reserve sufficient space.
This can result in reallocation overhead, skb headroom underflows, or KASAN slab-use-after-free crashes when dev_hard_header() / macvlan_hard_header() prepends header data or when lower devices append tailroom.
Fix this by: 1. Inheriting needed_headroom and needed_tailroom from lowerdev in macvlan_init(). 2. Propagating needed_headroom and needed_tailroom updates to attached macvlans in macvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.18Upgrade kernel-livepatch-6.18.48-107.148Upgrade perf6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade bpftool6.18-debuginfoUpgrade kernel6.18Upgrade kernel6.18-modules-extraUpgrade microvm-kernel6.18Upgrade kernel6.18-develUpgrade kernel6.18-toolsUpgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64 | Sep 30, 2026 | Aug 26, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 27, 2026 | Aug 27, 2026 |
| Redhat_linux | — | No solution exists | Aug 31, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-nvidia-tegra | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 26, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub