In the Linux kernel, the following vulnerability has been resolved:
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(), but leave needed_headroom and needed_tailroom set to 0.
When the underlying phy_dev (or stacked lower device) requires extra headroom or tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx headroom), upper layers calculating packet headroom and tailroom fail to reserve sufficient space.
This can result in reallocation overhead, skb headroom underflows, or KASAN slab-use-after-free crashes when dev_hard_header() / ipvlan_hard_header() prepends header data or when lower devices append tailroom.
Fix this by: 1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init(). 2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-core | Oct 11, 2026 | Oct 5, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perf6.18Upgrade perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel-livepatch-6.18.48-107.148Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18Upgrade kernel6.18-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.18-tools | Sep 30, 2026 | Aug 26, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 27, 2026 | Aug 27, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 31, 2026 | Aug 26, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64 | Oct 7, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 26, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub