Description
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from
has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same
externally-owned or page-cache-backed frags, but the shared-frag marker
is currently lost.
That breaks the invariant relied on by later in-place writers. In
particular, ESP input checks skb_has_shared_frag() before deciding
whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP
receive coalescing has moved shared frags into an unmarked skb, ESP can
see skb_has_shared_frag() as false and decrypt in place over page-cache
backed frags.
Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged
frags. The tailroom copy path does not need the marker because it copies
bytes into @to's linear data rather than transferring frag descriptors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.9 | 5.10.257 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.9-1 | — |
| Debian 13 | linux | 6.12.90-1 | — |
| Debian 12 | linux | 6.1.174-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1023.27 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1093.95 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-22.22 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-aws +1 | 7.0.0-1006.6 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1005.5 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1007.7 | USN-8461-1, USN-8370-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1009.9 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-oem-7.0 | 7.0.0-1008.8 | USN-8489-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1011.11 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-22.22.1 | USN-8370-1 |
| Ubuntu 25.10 | linux | 6.17.0-35.35 | USN-8371-1 |
| Ubuntu 25.10 | linux-aws +1 | 6.17.0-1017.17 | USN-8371-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1018.19 | USN-8374-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1016.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1018.18 | USN-8371-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1014.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-35.35.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-124.124 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1057.60 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1017.17~24.04.1 | USN-8374-1, USN-8371-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1058.64 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1060.63 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1018.19~24.04.1 | USN-8374-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1055.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1042.45 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-35.35~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | USN-8569-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1057.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-134.134.1 | USN-8497-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1055.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1021.21 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1055.58.1 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1026.26 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1024.24 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1054.55 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1016.16~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1057.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-riscv +18 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-35.35.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1032.33 | USN-8499-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-181.191 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1109.116 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1057.60~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-azure +1 | 5.15.0-1114.123 | USN-8426-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 | USN-8440-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1109.118 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1060.63~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1105.111 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1092.100 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-124.124~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1103.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1057.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1104.110 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1101.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 | USN-8497-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1104.105 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1055.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1061.61 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1050.50 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1106.112 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1054.55~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1074.78 | USN-8528-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2046.47 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1052.53 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1014.16~24.04.1 | USN-8371-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1101.103 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1108.117 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1052.53~22.04.1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1057.60+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1059.65+fips1 | USN-8393-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-124.124+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1060.63+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1109.116+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1114.123+fips1 | USN-8426-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-181.191+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1109.118+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1161.172+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1166.172+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1135.145 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1164.173+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2132.138 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2112.118 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1149.161 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2095.101 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1126.133 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-30.30 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1011.11 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1012.12 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1010.10 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-142.142 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1065.68 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1068.76 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1069.77 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1064.72 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1065.66 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1062.65 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-202.212 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1119.126 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1065.68~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1125.134 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1120.130 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1069.77~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1115.121 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1113.117 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-lowlatency | 5.15.0-197.207 | LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-233.253 | LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1161.172 | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1109.116~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1166.172 | — |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 +1 | 5.15.0-1114.123~20.04.1 | USN-8426-1 |
| Ubuntu Pro 20.04 LTS | linux-bluefield | 5.4.0-1120.127 | — |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1164.173 | — |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1109.118~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-181.191~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1107.112 | — |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1103.106~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1104.110~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-iot | 5.4.0-1065.68 | — |
| Ubuntu Pro 20.04 LTS | linux-kvm | 5.4.0-1148.157 | — |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1061.61~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1159.169 | — |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1106.112~20.04.1 | USN-8462-1 |
| Ubuntu Pro 20.04 LTS | linux-raspi | 5.4.0-1144.157 | — |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1103.107~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1079.83 | — |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-253.265 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1194.207 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1161.172~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1204.219 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1166.172~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1187.204 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1164.173~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-233.253~18.04.1 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1107.112~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1176.181 | — |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1156.167 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1159.169~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1144.157~18.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-283.317 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1194.209 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1194.207~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1204.219~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1187.204~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-253.265~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1157.168 | — |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1156.167~16.04.1 | — |
| Ubuntu Pro 14.04 LTS | linux | 3.13.0-214.265 | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1156.162 | — |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1205.220~14.04.1 | — |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-283.317~14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-211.16.1.el10_2 | RHSA-2026:19569 |
| RHEL 9 | rv +75 | 5.14.0-687.10.1.el9_8 | RHSA-2026:19568 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.125.1.rt7.466.el8_10 | RHSA-2026:19664 |
| RHEL 8 | kpatch-patch-4_18_0-553_109_1 | 1-3.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_40_1 | 1-12.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_53_1 | 1-10.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_72_1 | 1-7.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_85_1 | 1-5.el8_10 | RHSA-2026:23470 |
| RHEL 8 | perf +26 | 4.18.0-553.125.1.el8_10 | RHSA-2026:19666 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.75.1.el10_0 | RHSA-2026:20299 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_17_1 | 1-15.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_39_1 | 1-6.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_66_1 | 1-5.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_94_1 | 1-3.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.116.1.el9_6 | RHSA-2026:20129 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_100_1 | 1-5.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_113_1 | 1-3.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_55_1 | 1-15.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_68_2 | 1-12.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_84_1 | 1-7.el9_4 | RHSA-2026:24814 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.172.1.rt14.457.el9_2 | RHSA-2026:19875 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_104_1 | 1-16.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_117_1 | 1-13.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_134_1 | 1-7.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_148_1 | 1-5.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_158_1 | 1-3.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.180.1.rt21.252.el9_0 | RHSA-2026:19711 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.180.1.el9_0 | RHSA-2026:19705 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_107_1 | 1-6.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_120_1 | 1-5.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_130_1 | 1-3.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_89_1 | 1-12.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_97_1 | 1-10.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| Red Hat OpenShift 4 | openshift +1 | 4.21.0-202605142021.p2.geab2218.assembly.stream.el8 | RHBA-2026:20032 |
| Red Hat OpenShift 4 | openshift-kubelet +3 | 4.21.0-202605142021.p2.geab2218.assembly.stream.el9 | RHBA-2026:20032 |
| Red Hat OpenShift 4 | rv +105 | 5.14.0-570.116.1.el9_6 | RHBA-2026:20032 |
| Red Hat Enterprise Linux Nvidia 10 | rv +35 | 6.12.0-211.8.el10nv | RHSA-2026:33486, RHSA-2026:19540 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-124.56.5.el10_1 | ALSA-2026:A010, ALSA-2026:19569 |
| AlmaLinux 10 | rv +72 | 6.12.0-211.16.1.el10_2 | ALSA-2026:19569 |
| AlmaLinux 9 | rv +116 | 5.14.0-611.54.6.el9_7 | ALSA-2026:A009, ALSA-2026:19568 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.125.1.rt7.466.el8_10 | ALSA-2026:19664 |
| AlmaLinux 8 | perf +29 | 4.18.0-553.124.4.el8_10 | ALSA-2026:A008, ALSA-2026:19666 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-211.16.1.el10_2.0.1 | RLSA-2026:19569 |
| Rocky Linux 9 | kernel | 5.14.0-687.10.1.el9_8.0.1 | RLSA-2026:19568 |
| Rocky Linux 8 | kernel | 4.18.0-553.125.1.el8_10 | RLSA-2026:19666 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.125.1.rt7.466.el8_10 | RLSA-2026:19664 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 | SUSE-SU-2026:2238-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 13-160000.4.3 | SUSE-SU-2026:22039-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 11-160000.1.1 | SUSE-SU-2026:22031-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 9-160000.1.1 | SUSE-SU-2026:22038-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 8-160000.1.1 | SUSE-SU-2026:22030-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 7-160000.1.1 | SUSE-SU-2026:22033-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22040-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 5-160000.1.1 | SUSE-SU-2026:22035-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 4-160000.1.1 | SUSE-SU-2026:22032-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 3-160000.1.1 | SUSE-SU-2026:22034-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 | 2-160000.1.1 | SUSE-SU-2026:22029-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 13-160000.4.3 | SUSE-SU-2026:22039-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 11-160000.1.1 | SUSE-SU-2026:22031-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 9-160000.1.1 | SUSE-SU-2026:22038-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 8-160000.1.1 | SUSE-SU-2026:22030-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 7-160000.1.1 | SUSE-SU-2026:22033-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22040-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 5-160000.1.1 | SUSE-SU-2026:22035-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 4-160000.1.1 | SUSE-SU-2026:22032-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 3-160000.1.1 | SUSE-SU-2026:22034-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 | 2-160000.1.1 | SUSE-SU-2026:22029-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22042-1 |
| SLE Micro 6.2 | kernel-syms +1 | 6.12.0-160000.31.1 | SUSE-SU-2026:21779-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22488-1, SUSE-SU-2026:22462-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_20 +1 | 2-1.1 | SUSE-SU-2026:22489-1, SUSE-SU-2026:22474-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22411-1, SUSE-SU-2026:22402-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_20 +1 | 2-1.1 | SUSE-SU-2026:22425-1, SUSE-SU-2026:22412-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 | SUSE-SU-2026:2238-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 7.0.11-1.1 | openSUSE-SU-2026:10954-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.25-57.109 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1710, ALAS2023-2026-1709, ALAS2023-2026-1708 |
| Amazon Linux 2023 | perf +11 | 1:6.1.170-213.321.amzn2023 | ALAS2023-2026-1710 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.83-115.161.amzn2023 | ALAS2023-2026-1708 |
| Amazon Linux 2023 | perf6.18 +11 | 1:6.18.25-57.109.amzn2023 | ALAS2023-2026-1709 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-282.729 | 1.0-0.amzn2 | ALAS2-2026-3307 |
| Amazon Linux 2 | perf +8 | 4.14.355-282.729.amzn2 | ALAS2-2026-3307 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.141.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-211.34.1.el10_2 | ELSA-2026-19569 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-202.76.4.4.el10uek | ELSA-2026-50372, ELSA-2026-50293, ELSA-2026-50286 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.17.1.el9_8 | ELSA-2026-19568 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-320.202.8.5.el9uek | ELSA-2026-50294, ELSA-2026-50287 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.125.1.el8_10 | ELSA-2026-50294, ELSA-2026-50287, ELSA-2026-19666 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.355.3.4.el8uek | ELSA-2026-50299, ELSA-2026-50288 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.355.3.4.el7uek | ELSA-2026-50299, ELSA-2026-50288 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Fragnesia LPE (CVE-2026-46300)
exploit/linux/local/cve_2026_46300_fragnesia
Exploit-DB 1
- Linux Kernel - Local Privilege Escalation EDB-52591 · local · May 29, 2026
GitHub 16 repositories · most starred shown
-
ashrafzaryouh/CVE-2026-46300 ★ 16 · May 15, 2026
CVE-2026-46300
-
MadExploits/CVE-2026-46300 ★ 3 · Jun 30, 2026
CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit
-
azilRababe/CVE-2026-46300 ★ 2 · Jun 22, 2026
Technical analysis of CVE-2026-46300 (Fragnesia), a Linux kernel page-cache write vulnerability that enables local privilege escalation through SKBFL_SHARED_FRAG invariant violations in the networkin…
-
HORKimhab/CVE-2026-46300 ★ 2 · May 14, 2026
CVE-2026-46300
-
1neptune/Fragnesia ★ 1 · Jun 3, 2026
Add go CVE-2026-46300 (Fragnesia) local privilege escalation exploit
-
Sentebale/CVE-2026-46300 ★ 1 · May 14, 2026
-
Koshmare-Blossom/Fragnesia-go ★ 0 · May 20, 2026
A Go implementation of fragnesia (CVE-2026-46300)
-
Maxime288/Fragnesia-CVE-2026-46300 ★ 0 · May 20, 2026
-
First-John/cve_2026_frag_family_fix ★ 0 · May 18, 2026
CVE-2026-46300 / CVE-2026-43500 / CVE-2026-31431 / CVE-2026-43284 golang hotfix
-
ExploitEoom/CVE-2026-46300 ★ 0 · May 17, 2026
Linux kernel root exploit
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- RHBA-2026:20032 Red Hat Bug Fix Advisory: OpenShift Container Platform 4.21.17 packages update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:24814 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19711 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:23468 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19875 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:23469 Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20051 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:23470 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19568 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20054 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:23471 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20129 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20130 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19666 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20299 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:20593 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19521 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19540 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19569 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19664 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:19705 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- LSN-0122-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8569-1 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8373-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8440-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8461-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8489-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8371-1 linux, linux-aws, linux-azure, linux-azure-6.17, linux-hwe-6.17, linux-nvidia-6.17, linux-oem-6.17, linux-oracle, linux-oracle-6.17, linux-raspi, linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8370-1 linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8374-1 linux-aws-6.17, linux-gcp, linux-gcp-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8393-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8528-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8462-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-1 linux-azure-5.15, linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- ALSA-2026:19569 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19568 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A009 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A010 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19666 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19664 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A008 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-1530 Linux Kernel (Fragnesia): Schwachstelle ermöglicht Erlangen von Administratorrechten BSI CERT-Bund (WID) · Oct 28, 2026
- WID-SEC-2026-3623 IBM DataPower Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- NCSC-2026-0431 Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten NCSC-NL (Netherlands) · Oct 16, 2026
- SSA-019113 SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6 Siemens ProductCERT · Oct 13, 2026
- SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
- RHSA-2026:33486 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
References
- https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987
- https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c
- https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5
- https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0
- https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e
- https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a
- https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111
- https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3