CVE-2021-47099
NoneCVSS
—
EPSS
0.2%
Published
Mar 4, 2024
CISA due date
—
Cloudanix analysis
A flaw in Linux virtual network handling can crash the kernel when certain network features are active together, potentially disrupting systems until fixed.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Theoretical
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Allows cloned or shared skbs to enter the GRO engine on veth devices when NAPI is enabled without XDP, triggering invalid opcode BUG in skb_shift during TCP sacktag processing.
Why it matters to the business
Kernel crashes on affected Linux systems using virtual Ethernet devices with GRO enabled can cause network outages and service disruption; low exploitability reduces immediate ransomware risk but still requires attention on high-traffic hosts.
How an attack unfolds
An attacker sends TCP traffic that results in cloned skbs reaching the veth NAPI path; without a share check the skb enters GRO, later causing skb_shift to fail with an invalid opcode during TCP ACK processing in the softirq context.
How to fix it
Upgrade the Linux kernel to a version containing commit that skips GRO for shared/cloned skbs and prefers uncloning before fallback; apply vendor backports for distributions still shipping vulnerable 5.x kernels.
How to confirm the fix worked
Confirm kernel version includes the veth GRO share check fix; test by enabling GRO on veth with TSO disabled on peer and verifying no skb_shift BUG occurs under TCP load.
Typical attack path
- Send TCP segments that force skb cloning on veth peer
- Trigger NAPI/GRO path when TSO is disabled on peer
- skb enters GRO without share validation
- tcp_sacktag_walk calls skb_shift which hits BUG
How to detect it
Search kernel logs for 'kernel BUG at net/core/skbuff.c' combined with 'skb_shift' and call traces containing tcp_sacktag_walk or gro_cell_poll; correlate with veth interface usage.
- kernel BUG at net/core/skbuff.c:3574
- skb_shift+0x13ef/0x23b0
- invalid opcode: 0000 [#1] PREEMPT SMP KASAN
- Call Trace: tcp_sacktag_walk+0xaba/0x18e0
What your security team should do
- Prioritize kernel updates on systems exposing veth interfaces to untrusted traffic
- Monitor for kernel BUG reports matching skb_shift in softirq context
- Disable GRO on veth devices where feasible until patched
The record
In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b ("veth: allow enabling NAPI even without XDP"), if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI callback. If there is no XDP program attached, the veth code does not perform any share check, and shared/cloned skbs could enter the GRO engine. Ignat reported a BUG triggered later-on due to the above condition: [ 53.970529][ C1] kernel BUG at net/core/skbuff.c:3574! [ 53.981755][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 53.982634][ C1] CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc5+ #25 [ 53.982634][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 [ 53.982634][ C1] RIP: 0010:skb_shift+0x13ef/0x23b0 [ 53.982634][ C1] Code: ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 41 0c 00 00 41 80 7f 02 00 4d 8d b5 d0 00 00 00 0f 85 74 f5 ff ff <0f> 0b 4d 8d 77 20 be 04 00 00 00 4c 89 44 24 78 4c 89 f7 4c 89 8c [ 53.982634][ C1] RSP: 0018:ffff8881008f7008 EFLAGS: 00010246 [ 53.982634][ C1] RAX: 0000000000000000 RBX: ffff8881180b4c80 RCX: 0000000000000000 [ 53.982634][ C1] RDX: 0000000000000002 RSI: ffff8881180b4d3c RDI: ffff88810bc9cac2 [ 53.982634][ C1] RBP: ffff8881008f70b8 R08: ffff8881180b4cf4 R09: ffff8881180b4cf0 [ 53.982634][ C1] R10: ffffed1022999e5c R11: 0000000000000002 R12: 0000000000000590 [ 53.982634][ C1] R13: ffff88810f940c80 R14: ffff88810f940d50 R15: ffff88810bc9cac0 [ 53.982634][ C1] FS: 0000000000000000(0000) GS:ffff888235880000(0000) knlGS:0000000000000000 [ 53.982634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.982634][ C1] CR2: 00007ff5f9b86680 CR3: 0000000108ce8004 CR4: 0000000000170ee0 [ 53.982634][ C1] Call Trace: [ 53.982634][ C1] <TASK> [ 53.982634][ C1] tcp_sacktag_walk+0xaba/0x18e0 [ 53.982634][ C1] tcp_sacktag_write_queue+0xe7b/0x3460 [ 53.982634][ C1] tcp_ack+0x2666/0x54b0 [ 53.982634][ C1] tcp_rcv_established+0x4d9/0x20f0 [ 53.982634][ C1] tcp_v4_do_rcv+0x551/0x810 [ 53.982634][ C1] tcp_v4_rcv+0x22ed/0x2ed0 [ 53.982634][ C1] ip_protocol_deliver_rcu+0x96/0xaf0 [ 53.982634][ C1] ip_local_deliver_finish+0x1e0/0x2f0 [ 53.982634][ C1] ip_sublist_rcv_finish+0x211/0x440 [ 53.982634][ C1] ip_list_rcv_finish.constprop.0+0x424/0x660 [ 53.982634][ C1] ip_list_rcv+0x2c8/0x410 [ 53.982634][ C1] __netif_receive_skb_list_core+0x65c/0x910 [ 53.982634][ C1] netif_receive_skb_list_internal+0x5f9/0xcb0 [ 53.982634][ C1] napi_complete_done+0x188/0x6e0 [ 53.982634][ C1] gro_cell_poll+0x10c/0x1d0 [ 53.982634][ C1] __napi_poll+0xa1/0x530 [ 53.982634][ C1] net_rx_action+0x567/0x1270 [ 53.982634][ C1] __do_softirq+0x28a/0x9ba [ 53.982634][ C1] run_ksoftirqd+0x32/0x60 [ 53.982634][ C1] smpboot_thread_fn+0x559/0x8c0 [ 53.982634][ C1] kthread+0x3b9/0x490 [ 53.982634][ C1] ret_from_fork+0x22/0x30 [ 53.982634][ C1] </TASK> Address the issue by skipping the GRO stage for shared or cloned skbs. To reduce the chance of OoO, try to unclone the skbs before giving up. v1 -> v2: - use avoid skb_copy and fallback to netif_receive_skb - Eric
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:12 | linux | 0 | 5.15.15-1 |
| Debian:13 | linux | 0 | 5.15.15-1 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-425.3.1.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-425.3.1.rt7.213.el8 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
Related vulnerabilities
- CVE-2025-39885 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive… Also affects linux
- CVE-2025-39883 In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure… Also affects linux
- CVE-2025-39886 In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to… Also affects linux
- CVE-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix… Also affects linux
- CVE-2025-39880 In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid… Also affects linux
- CVE-2025-39881 In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in… Also affects linux
- CVE-2025-39877 In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix… Also affects linux
- CVE-2025-39871 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd… Also affects linux