In the Linux kernel, the following vulnerability has been resolved:
veth: manage XDP program pointers during channel resize
veth_set_channels() tears down XDP resources for removed RX queues without clearing rq->xdp_prog. If the program is then detached or replaced, those queues keep the old pointer after bpf_prog_put(). A later channel increase can re-enable NAPI and run the freed program.
BUG: unable to handle page fault for address: ffffc90000256048 Oops: Oops: 0000 [#1] SMP KASAN NOPTI RIP: veth_xdp_rcv_skb (include/linux/filter.h:779 include/net/xdp.h:696 drivers/net/veth.c:820) Call Trace: veth_xdp_rcv (drivers/net/veth.c:941) veth_poll (drivers/net/veth.c:986) __napi_poll (net/core/dev.c:7787) net_rx_action (net/core/dev.c:7850 net/core/dev.c:8007) handle_softirqs (kernel/softirq.c:645) Kernel panic - not syncing: Fatal exception in interrupt
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-livepatch-6.18.56-125.164Upgrade kernel6.18-headersUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfoUpgrade perf6.18Upgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18Upgrade bpftool6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade kernel6.18-modules-extra | Oct 28, 2026 | Oct 9, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Oct 20, 2026 | Oct 9, 2026 |
| Redhat_linux | — | No solution exists | Oct 13, 2026 | Oct 9, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Oct 9, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub