In the Linux kernel, the following vulnerability has been resolved:
vxlan: re-fetch eth header after route_shortcircuit()
Before route_shortcircuit(), the eth header pointer is cached from eth_hdr(skb).
Inside route_shortcircuit(), pskb_may_pull() can be called, which may reallocate skb->head.
In this case, returning to vxlan_xmit() leaves the cached eth pointer pointing to freed memory, leading to a use-after-free when dereferencing eth->h_dest.
Fix this by updating eth = eth_hdr(skb) after calling route_shortcircuit().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfoUpgrade kernel6.12-develUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel6.18Upgrade kernel6.12Upgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade kernel-livepatch-6.12.103-127.188Upgrade perf6.12Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-develUpgrade python3-perf6.18Upgrade kernel6.12-toolsUpgrade microvm-kernel6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.18Upgrade kernel6.12-tools-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.18.44-99.149Upgrade bpftool6.18-debuginfo | Sep 30, 2026 | Aug 28, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 30, 2026 | Aug 30, 2026 |
| Redhat_linux | — | No solution exists | Sep 2, 2026 | Aug 28, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-kvmUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-intelUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-generic-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-awsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-oem-20.04b | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub