Description
In the Linux kernel, the following vulnerability has been resolved:
net: use dst_dev_rcu() in sk_setup_caps()
Use RCU to protect accesses to dst->dev from sk_setup_caps()
and sk_dst_gso_max_size().
Also use dst_dev_rcu() in ip6_dst_mtu_maybe_forward(),
and ip_dst_mtu_maybe_forward().
ip4_dst_hoplimit() can use dst_dev_net_rcu().
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.13 | 6.1.191 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.17.6-1 | — |
| Debian 13 | linux | 6.12.69-1 | DSA-6126-1 |
| Debian 12 | linux | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu 25.10 | linux | 6.17.0-14.14 | USN-8029-1 |
| Ubuntu 25.10 | linux-aws +2 | 6.17.0-1007.7 | USN-8030-1, USN-8029-2 |
| Ubuntu 25.10 | linux-azure +1 | 6.17.0-1008.8 | USN-8029-3, USN-8029-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1006.7 | USN-8029-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-14.14.1 | — |
| Ubuntu 24.04 LTS | linux +35 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1007.7~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1008.8~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1035.38 | USN-8781-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1011.11 | USN-8048-1 |
| Ubuntu 22.04 LTS | linux +59 | No fix yet | — |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime +2 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1006.7~24.04.1 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime +2 | No fix yet | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +21 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux-gcp +4 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-azure | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-124.31.1.el10_1 | RHSA-2026:1690 |
| RHEL 9 | rv +75 | 5.14.0-611.30.1.el9_7 | RHSA-2026:2212 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.104.1.rt7.445.el8_10 | RHSA-2026:2378 |
| RHEL 8 | perf +26 | 4.18.0-553.104.1.el8_10 | RHSA-2026:2264 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.82.1.el10_0 | RHSA-2026:27731 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.120.1.el9_6 | RHSA-2026:25218 |
| RHEL 9.4 E4S | bpftool | 7.3.0-427.129.1.el9_4 | RHSA-2026:23237 |
| RHEL 9.4 E4S | rv +62 | 5.14.0-427.129.1.el9_4 | RHSA-2026:23237 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.176.1.el9_2 | RHSA-2026:26515 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.176.1.rt14.461.el9_2 | RHSA-2026:26462 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.176.1.el9_2 | RHSA-2026:26515 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.145.1.el8_8 | RHSA-2026:22964 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.145.1.el8_8 | RHSA-2026:22964 |
| RHEL 8.6 EUS Long Life | perf +17 | 4.18.0-372.195.1.el8_6 | RHSA-2026:25533 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.195.1.el8_6 | RHSA-2026:25533 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.194.1.el8_4 | RHSA-2026:26535 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.194.1.el8_4 | RHSA-2026:26535 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-124.31.1.el10_1 | ALSA-2026:1690 |
| AlmaLinux 9 | rv +73 | 5.14.0-611.30.1.el9_7 | ALSA-2026:2212 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.104.1.rt7.445.el8_10 | ALSA-2026:2378 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.104.1.el8_10 | ALSA-2026:2264 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-124.31.1.el10_1 | RLSA-2026:1690 |
| Rocky Linux 9 | kernel | 5.14.0-611.30.1.el9_7 | RLSA-2026:2212 |
| Rocky Linux 8 | kernel | 4.18.0-553.104.1.el8_10 | RLSA-2026:2264 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.28.1 | SUSE-SU-2026:0315-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.24.1 | SUSE-SU-2026:0281-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.28.1.150700.17.19.1 | SUSE-SU-2026:0315-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.290.1 | SUSE-SU-2026:0316-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.9.1 | SUSE-SU-2026:20220-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20220-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.9.1 | SUSE-SU-2026:20228-1, SUSE-SU-2026:20220-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20220-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | SUSE-SU-2026:20207-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.9.1 | SUSE-SU-2026:20564-1, SUSE-SU-2026:20207-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20876-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20498-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-39.1.21.16 | SUSE-SU-2026:20477-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-40.1 | SUSE-SU-2026:20845-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-39.1 | SUSE-SU-2026:20477-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.28.1 | SUSE-SU-2026:0315-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_8 | 1-150700.1.3.1 | SUSE-SU-2026:0278-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_8 | 1-150700.15.3.1 | SUSE-SU-2026:0315-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_19 | 1-150600.13.3.1 | SUSE-SU-2026:0293-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.290.1 | SUSE-SU-2026:0316-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_76 | 1-8.7.1 | SUSE-SU-2026:0316-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.28.1 | SUSE-SU-2026:0278-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.9.1.160000.2.6 | openSUSE-SU-2026:20145-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.9.1 | openSUSE-SU-2026:20145-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.84.1 | SUSE-SU-2026:0293-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.84.1.150600.12.38.1 | SUSE-SU-2026:0293-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.64-87.122 | 1:1.0-0.amzn2023 | ALAS2023-2026-1423 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.64-87.122.amzn2023 | ALAS2023-2026-1423 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.161.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-124.31.1.el10_1 | ELSA-2026-1690 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-108.64.6.3.el10uek | ELSA-2026-50112 |
| Oracle Linux 9 | rv +28 | 5.14.0-611.30.1.el9_7 | ELSA-2026-2212 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.104.1.el8_10 | ELSA-2026-2264 |
Advisories 48
- RHSA-2026:2212 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2025-2579 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8781-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8029-2 linux-aws, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8048-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8029-3 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8030-1 linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8029-1 linux, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2026:2212 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:1690 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2264 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:2378 Moderate: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:26535 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:27731 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:25533 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:26462 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:26515 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23237 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:22964 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:25218 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 5, 2026
- WID-SEC-2026-0783 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- WID-SEC-2026-2253 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- RHSA-2026:2378 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Sep 9, 2026
- RHSA-2026:2264 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 9, 2026
- RHSA-2026:1690 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 27, 2026
- SUSE-SU-2026:20564-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- SUSE-SU-2026:20876-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 31, 2026
- SUSE-SU-2026:20845-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 28, 2026
- openSUSE-SU-2026:20145-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20498-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20477-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20228-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20220-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20207-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0293-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0316-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0281-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0278-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0315-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-6126-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- ELSA-2026-50112 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Feb 20, 2026
- RLSA-2026:2212 Moderate: kernel security update Rocky Linux Security Advisories · Feb 15, 2026
- RLSA-2026:2264 Moderate: kernel security update Rocky Linux Security Advisories · Feb 15, 2026
- ALAS2023-2026-1423 Important: kernel6.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 11, 2026
- ELSA-2026-2264 Important: kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 9, 2026
- ELSA-2026-2212 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Feb 9, 2026
- RLSA-2026:1690 Important: kernel security update Rocky Linux Security Advisories · Feb 8, 2026
- ELSA-2026-1690 Important: kernel security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Feb 2, 2026
References
- https://git.kernel.org/stable/c/13b0e14bfa7e6d506d8d6426b9e6d7feef01ded3
- https://git.kernel.org/stable/c/9f22b5f7f1a32f8bbcc82bf34e34ea63523fcd02
- https://git.kernel.org/stable/c/5d1be493d1110c9e720b4c51a6e587bb2fb4ac12
- https://git.kernel.org/stable/c/a805729c0091073d8f0415cfa96c7acd1bc17a48
- https://git.kernel.org/stable/c/99a2ace61b211b0be861b07fbaa062fca4b58879