Description
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix the ACK parser to extract the SACK table for parsing
Fix modification of the received skbuff in rxrpc_input_soft_acks() and a
potential incorrect access of the buffer in a fragmented UDP packet (the
packet would probably have to be deliberately pre-generated as fragmented)
when AF_RXRPC tries to extract the contents of the SACK table by copying
out the contents of the SACK table into a buffer before attempting to parse
AF_RXRPC assumes that it can just call skb_condense() and then validly
access the SACK table from skb->data and that it will be a flat buffer -
but skb_condense() can silently fail to do anything under some
circumstances.
Note that whilst rxrpc_input_soft_acks() should be able to parse extended
ACKs, the rest of AF_RXRPC doesn't currently support that.
Further, there's then no need to call skb_condense() in rxrpc_input_ack(),
so don't.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.2 | 6.6.144 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.13-1 | — |
| Debian 13 | linux | 6.12.95-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1028.33 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-29.29 | USN-8629-1 |
| Ubuntu 26.04 LTS | linux-aws +3 | 7.0.0-1010.10 | USN-8660-1, USN-8637-1, USN-8629-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1005.6 | USN-8660-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1011.11 | USN-8629-1 |
| Ubuntu 26.04 LTS | linux-nvidia-bos | 7.0.0-2016.16 | USN-8664-1 |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1009.9 | USN-8629-1 |
| Ubuntu 26.04 LTS | linux-raspi +1 | 7.0.0-1016.16 | USN-8663-1, USN-8629-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-29.29.1 | USN-8629-1 |
| Ubuntu 25.10 | linux +8 | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-137.137 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1062.65 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1010.10~24.04.1 | USN-8629-2 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1064.72 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-azure-7.0 | 7.0.0-1014.14~24.04.1 | USN-8728-2 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1063.70 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1013.13~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1065.73 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-gcp-7.0 +1 | 7.0.0-1011.11~24.04.1 | USN-8728-3, USN-8728-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1060.68 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1047.51 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-29.29~24.04.2 | USN-8629-3 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1062.63 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-137.137.1 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1060.63 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1032.32 | USN-8748-1 |
| Ubuntu 24.04 LTS | linux-nvidia-7.0 | 7.0.0-1016.16~24.04.1 | USN-8663-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1060.63.1 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1031.32 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1033.33 | USN-8911-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1059.62 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1062.66 | USN-8630-5 |
| Ubuntu 24.04 LTS | linux-riscv +26 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-30.30.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1034.35 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1062.65~22.04.2 | USN-8630-4 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1064.72~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1063.70~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1065.73~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-138.138~22.04.1 | USN-8656-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1062.63~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-137.137.1~22.04.1 | USN-8630-2 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1060.63~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1059.62~22.04.1 | USN-8630-3 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-137.137~22.04.1 | — |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2051.53 | USN-8630-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1057.58 | USN-8630-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1057.58~22.04.1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1062.65+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1064.72+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-137.137+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1065.73+fips1 | USN-8630-1 |
| Ubuntu Pro 26.04 LTS | linux | 7.0.0-30.30 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-aws | 7.0.0-1011.11 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-azure | 7.0.0-1012.12 | LSN-0122-1 |
| Ubuntu Pro 26.04 LTS | linux-gcp | 7.0.0-1010.10 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux | 6.8.0-142.142 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-aws | 6.8.0-1065.68 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-azure | 6.8.0-1068.76 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gcp | 6.8.0-1069.77 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-gke | 6.8.0-1064.72 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-ibm | 6.8.0-1065.66 | LSN-0122-1 |
| Ubuntu Pro 24.04 LTS | linux-oracle | 6.8.0-1062.65 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux | 5.15.0-202.212 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws | 5.15.0-1119.126 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-aws-6.8 | 6.8.0-1065.68~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-azure | 5.15.0-1125.134 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp | 5.15.0-1120.130 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gcp-6.8 | 6.8.0-1069.77~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-gke | 5.15.0-1115.121 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm | 5.15.0-1113.117 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-ibm-6.8 | 6.8.0-1066.67~22.04.1 | LSN-0122-1 |
| Ubuntu Pro 22.04 LTS | linux-lowlatency | 5.15.0-197.207 | LSN-0122-1 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-245.265 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-260.272 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1197.210 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1207.222 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1190.207 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-245.265~18.04.1 | LSN-0122-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1160.171 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-291.325 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1200.215 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1197.210~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1208.223~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1190.207~16.04.1 | LSN-0122-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-260.272~16.04.2 | LSN-0122-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.144.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-206.104.3.3.el10uek | ELSA-2026-500248 |
Advisories 21
- LSN-0122-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-1 linux-gcp-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-2 linux-azure-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- USN-8728-3 linux-oracle-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-2077 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- USN-8911-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8664-1 linux-nvidia-bos vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8663-1 linux-nvidia, linux-nvidia-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
- USN-8630-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-realtime, linux-realtime-6.8, linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Oct 8, 2026
- USN-8630-3 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-4 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8637-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-2 linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8656-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8660-1 linux-gcp, linux-gke vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8629-1 linux, linux-aws, linux-azure, linux-azure-fde, linux-ibm, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8629-2 linux-aws-7.0 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8629-3 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8748-1 linux-nvidia-6.17 vulnerabilities Ubuntu Security Notices (USN) · Sep 10, 2026
- ELSA-2026-500248 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 4, 2026
References
- https://git.kernel.org/stable/c/5d1ae4e17a3ecd8561cdb4f4f70152f41039c4e1
- https://git.kernel.org/stable/c/775c5e89272a2615b72bb84f611ba66fa3b7493e
- https://git.kernel.org/stable/c/566c4c1244de50fbff1f89ff93c9d7b0fc256db4
- https://git.kernel.org/stable/c/224298450be5c04d2a6ea1c2a94669d7ebf65d00
- https://git.kernel.org/stable/c/333b6d5bb9f87827ac2639c737bf9613dbae7253