Description
An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.6.8-1 | — |
| Debian 13 | linux | 6.6.8-1 | — |
| Debian 12 | linux | 6.1.69-1 | DSA-5593-1 |
| Debian 11 | linux | 5.10.205-2 | DSA-5594-1 |
| Debian 10 | linux | 4.19.304-1 | DLA-3710-1 |
| Debian 10 | linux-5.10 | 5.10.205-2~deb10u1 | DLA-3711-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1036.38 | — |
| Ubuntu 24.04 LTS | linux-raspi | 6.7.0-1001.1 | — |
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-97.107 | USN-6653-3, USN-6653-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1055.60 | USN-6653-2 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1057.65 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1057.65.1 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1052.60 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-gke +1 | 5.15.0-1051.56 | USN-6653-4, USN-6653-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1037.43 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | 6.5.0-21.21~22.04.1 | USN-6651-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1047.50 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1049.55 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1045.45 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | 6.5.0-1014.14 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1022.22 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1009.9 | — |
| Ubuntu 22.04 LTS | linux-oem-6.1 | 6.1.0-1033.33 | USN-6639-1 |
| Ubuntu 22.04 LTS | linux-oem-6.5 | 6.5.0-1015.16 | USN-6651-2 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1052.58 | USN-6653-1 |
| Ubuntu 22.04 LTS | linux-riscv +24 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.5 +1 | 6.5.0-21.21.1~22.04.1 | USN-6651-2 |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | 6.5.0-1008.9~22.04.1 | USN-6651-3 |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1030.34 | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-172.190 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1119.129 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1055.60~20.04.1 | USN-6653-2 |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1124.131 | USN-6648-2 |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1057.65~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1057.65~20.04.1.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1079.85 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1123.132 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1052.60~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gkeop | 5.4.0-1086.90 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | 5.15.0-1037.43~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-97.107~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1066.71 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-ibm-5.15 | 5.15.0-1047.50~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1049.55~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1031.32 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1107.114 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1022.22~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1118.127 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1052.58~20.04.1 | USN-6653-1 |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1103.115 | USN-6648-1 |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1050.54~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1038.42 | USN-6648-1 |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1047.49 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1055.62 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1055.60+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-97.107+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1055.63+fips2 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1119.129+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1124.131+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2105.111 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2084.90 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1121.132 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2068.73 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1099.106 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-35.35 | LSN-0104-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1009.9 | LSN-0104-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1008.9 | LSN-0104-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1006.6 | LSN-0104-1 |
| Ubuntu Pro 22.04 LTS | linux +1 | 5.15.0-101.111 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1056.61 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.5 +1 | 6.5.0-1016.16~22.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1059.67 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-azure-6.5 | 6.5.0-1017.17~22.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1054.62 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1053.58 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.5 | 6.5.0-26.26~22.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1049.52 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 22.04 LTS | linux-oracle | 5.15.0-1061.67 | LSN-0104-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-174.193 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1121.131 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1056.61~20.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1126.133 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1125.134 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1054.62~20.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-gke | No fix yet | LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-gke-5.15 | 5.15.0-1032.37~20.04.1 | LSN-0104-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-gkeop | 5.4.0-1088.92 | LSN-0104-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-101.111~20.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1068.73 | LSN-0104-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1049.52~20.04.1 | LSN-0104-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1127.136 | LSN-0104-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1061.67~20.04.1 | LSN-0104-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-223.235 | USN-6701-1, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1166.179 | USN-6701-1, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1119.129~18.04.1 | USN-6648-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1175.190 | USN-6701-3, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1124.131~18.04.1 | USN-6648-2, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1160.177 | USN-6701-2, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1123.132~18.04.1 | USN-6648-1, LSN-0103-1, LSN-0102-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-172.190~18.04.1 | USN-6648-1, LSN-0104-1, LSN-0103-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1066.71~18.04.1 | USN-6648-1 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1150.155 | USN-6701-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1129.140 | USN-6701-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1118.127~18.04.1 | USN-6648-1 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1103.115~18.04.1 | USN-6648-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-252.286 | USN-6700-1, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1167.182 | USN-6700-2, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1166.179~16.04.1 | USN-6701-3, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1175.190~16.04.1 | USN-6701-3, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1160.177~16.04.1 | USN-6701-2, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-223.235~16.04.1 | USN-6701-1, LSN-0102-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1130.140 | USN-6700-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1129.140~16.04.1 | USN-6701-3 |
| Ubuntu Pro 14.04 LTS | linux | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1129.135 | USN-6700-1 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1175.190~14.04.1 | USN-6701-4 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-252.286~14.04.1 | USN-6700-1, LSN-0102-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | kernel | 5.15.148.1-1 | — |
Advisories 26
- USN-6653-1 linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6653-2 linux-aws, linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6701-4 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6653-3 linux-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6648-1 linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6653-4 linux-gke vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6701-2 linux-gcp, linux-gcp-4.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6701-3 linux-aws-hwe, linux-azure, linux-azure-4.15, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6700-2 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6651-3 linux-starfive-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6651-1 linux, linux-aws, linux-gcp, linux-hwe-6.5, linux-laptop, linux-oracle, linux-raspi, linux-starfive vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6639-1 linux-oem-6.1 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6648-2 linux-azure, linux-azure-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6701-1 linux, linux-aws, linux-hwe, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6700-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- USN-6651-2 linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
- LSN-0102-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Jun 3, 2026
- LSN-0104-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Jun 3, 2026
- LSN-0103-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Jun 3, 2026
- DSA-5594-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3710-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5593-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3711-1 linux-5.10 - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ICSA-25-226-15 Siemens SINEC OS CISA ICS & IT advisories · Feb 25, 2026
- SSA-613116 SSA-613116: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.1 Siemens ProductCERT · Feb 24, 2026
- WID-SEC-2024-0017 Linux Kernel: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Feb 15, 2026
References
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8
- https://github.com/torvalds/linux/commit/189ff16722ee36ced4d2a2469d4ab65a8fee4198
- [debian-lts-announce] 20240111 [SECURITY] [DLA 3710-1] linux security update mailing-list
- [debian-lts-announce] 20240111 [SECURITY] [DLA 3711-1] linux-5.10 security update mailing-list