In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: don't override retval if we already lost the skb If we're redirecting the skb, and haven't called tcfmirredforward(), yet, we need to tell the core to drop the skb by setting the retcode to SHOT. If we have called tcfmirred_forward(), however, the skb is out of our hands and returning SHOT will lead to UaF. Move the retval override to the error path which actually need it.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-image-unsigned-6.8.0-38-generic-64k-dbgsym": "6.8.0-38.38~22.04.1", "linux-buildinfo-6.8.0-38-generic-64k": "6.8.0-38.38~22.04.1", "linux-modules-iwlwifi-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-image-6.8.0-38-generic-dbgsym": "6.8.0-38.38~22.04.1", "linux-cloud-tools-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-modules-ipu6-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-headers-6.8.0-38-generic-64k": "6.8.0-38.38~22.04.1", "linux-tools-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-headers-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-hwe-6.8-cloud-tools-6.8.0-38": "6.8.0-38.38~22.04.1", "linux-modules-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-modules-6.8.0-38-generic-64k": "6.8.0-38.38~22.04.1", "linux-modules-usbio-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-hwe-6.8-tools-6.8.0-38": "6.8.0-38.38~22.04.1", "linux-image-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-hwe-6.8-headers-6.8.0-38": "6.8.0-38.38~22.04.1", "linux-image-unsigned-6.8.0-38-generic-dbgsym": "6.8.0-38.38~22.04.1", "linux-buildinfo-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-image-unsigned-6.8.0-38-generic-64k": "6.8.0-38.38~22.04.1", "linux-modules-extra-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-image-unsigned-6.8.0-38-generic": "6.8.0-38.38~22.04.1", "linux-tools-6.8.0-38-generic-64k": "6.8.0-38.38~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-modules-6.8.0-38-lowlatency-64k": "6.8.0-38.38.1~22.04.2", "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-38": "6.8.0-38.38.1~22.04.2", "linux-buildinfo-6.8.0-38-lowlatency-64k": "6.8.0-38.38.1~22.04.2", "linux-modules-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-image-unsigned-6.8.0-38-lowlatency-dbgsym": "6.8.0-38.38.1~22.04.2", "linux-image-unsigned-6.8.0-38-lowlatency-64k": "6.8.0-38.38.1~22.04.2", "linux-headers-6.8.0-38-lowlatency-64k": "6.8.0-38.38.1~22.04.2", "linux-cloud-tools-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-tools-6.8.0-38-lowlatency-64k": "6.8.0-38.38.1~22.04.2", "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-tools-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-modules-iwlwifi-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-buildinfo-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-lowlatency-hwe-6.8-headers-6.8.0-38": "6.8.0-38.38.1~22.04.2", "linux-image-unsigned-6.8.0-38-lowlatency-64k-dbgsym": "6.8.0-38.38.1~22.04.2", "linux-image-unsigned-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2", "linux-lowlatency-hwe-6.8-tools-6.8.0-38": "6.8.0-38.38.1~22.04.2", "linux-headers-6.8.0-38-lowlatency": "6.8.0-38.38.1~22.04.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-modules-nvidia-fs-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-nvidia-6.8-tools-6.8.0-1008": "6.8.0-1008.8~22.04.1", "linux-image-unsigned-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-buildinfo-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-image-unsigned-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-modules-extra-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-modules-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-modules-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-headers-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-nvidia-6.8-headers-6.8.0-1008": "6.8.0-1008.8~22.04.1", "linux-headers-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-modules-nvidia-fs-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-nvidia-6.8-tools-host": "6.8.0-1008.8~22.04.1", "linux-image-unsigned-6.8.0-1008-nvidia-dbgsym": "6.8.0-1008.8~22.04.1", "linux-tools-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-tools-6.8.0-1008-nvidia": "6.8.0-1008.8~22.04.1", "linux-buildinfo-6.8.0-1008-nvidia-64k": "6.8.0-1008.8~22.04.1", "linux-image-unsigned-6.8.0-1008-nvidia-64k-dbgsym": "6.8.0-1008.8~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-headers-6.8.0-38-generic": "6.8.0-38.38.1~22.04.1", "linux-modules-6.8.0-38-generic": "6.8.0-38.38.1~22.04.1", "linux-riscv-6.8-tools-6.8.0-38": "6.8.0-38.38.1~22.04.1", "linux-image-6.8.0-38-generic": "6.8.0-38.38.1~22.04.1", "linux-riscv-6.8-headers-6.8.0-38": "6.8.0-38.38.1~22.04.1", "linux-image-6.8.0-38-generic-dbgsym": "6.8.0-38.38.1~22.04.1", "linux-buildinfo-6.8.0-38-generic": "6.8.0-38.38.1~22.04.1", "linux-tools-6.8.0-38-generic": "6.8.0-38.38.1~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-cloud-tools-common": "6.8.0-20.20", "linux-headers-6.8.0-20": "6.8.0-20.20", "linux-modules-6.8.0-20-generic": "6.8.0-20.20", "linux-tools-6.8.0-20": "6.8.0-20.20", "linux-libc-dev": "6.8.0-20.20", "linux-cloud-tools-6.8.0-20": "6.8.0-20.20", "linux-source-6.8.0": "6.8.0-20.20", "linux-image-6.8.0-20-generic": "6.8.0-20.20", "linux-doc": "6.8.0-20.20", "linux-image-unsigned-6.8.0-20-generic": "6.8.0-20.20", "linux-headers-6.8.0-20-generic-64k": "6.8.0-20.20", "linux-headers-6.8.0-20-generic": "6.8.0-20.20", "linux-modules-extra-6.8.0-20-generic": "6.8.0-20.20", "linux-cloud-tools-6.8.0-20-generic": "6.8.0-20.20", "linux-tools-6.8.0-20-generic": "6.8.0-20.20", "linux-image-unsigned-6.8.0-20-generic-64k-dbgsym": "6.8.0-20.20", "linux-lib-rust-6.8.0-20-generic": "6.8.0-20.20", "linux-image-unsigned-6.8.0-20-generic-64k": "6.8.0-20.20", "linux-tools-host": "6.8.0-20.20", "linux-modules-iwlwifi-6.8.0-20-generic": "6.8.0-20.20", "linux-image-6.8.0-20-generic-dbgsym": "6.8.0-20.20", "linux-modules-6.8.0-20-generic-64k": "6.8.0-20.20", "linux-buildinfo-6.8.0-20-generic": "6.8.0-20.20", "linux-modules-ivsc-6.8.0-20-generic": "6.8.0-20.20", "linux-image-unsigned-6.8.0-20-generic-dbgsym": "6.8.0-20.20", "linux-tools-6.8.0-20-generic-64k": "6.8.0-20.20", "linux-modules-ipu6-6.8.0-20-generic": "6.8.0-20.20", "linux-buildinfo-6.8.0-20-generic-64k": "6.8.0-20.20", "linux-tools-common": "6.8.0-20.20" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-tools-6.8.0-1006-aws": "6.8.0-1006.6", "linux-modules-6.8.0-1006-aws": "6.8.0-1006.6", "linux-aws-cloud-tools-6.8.0-1006": "6.8.0-1006.6", "linux-buildinfo-6.8.0-1006-aws": "6.8.0-1006.6", "linux-cloud-tools-6.8.0-1006-aws": "6.8.0-1006.6", "linux-headers-6.8.0-1006-aws": "6.8.0-1006.6", "linux-modules-extra-6.8.0-1006-aws": "6.8.0-1006.6", "linux-image-unsigned-6.8.0-1006-aws": "6.8.0-1006.6", "linux-aws-headers-6.8.0-1006": "6.8.0-1006.6", "linux-image-unsigned-6.8.0-1006-aws-dbgsym": "6.8.0-1006.6", "linux-aws-tools-6.8.0-1006": "6.8.0-1006.6" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-azure-cloud-tools-6.8.0-1005": "6.8.0-1005.5", "linux-modules-6.8.0-1005-azure": "6.8.0-1005.5", "linux-modules-iwlwifi-6.8.0-1005-azure": "6.8.0-1005.5", "linux-azure-headers-6.8.0-1005": "6.8.0-1005.5", "linux-image-unsigned-6.8.0-1005-azure": "6.8.0-1005.5", "linux-headers-6.8.0-1005-azure": "6.8.0-1005.5", "linux-azure-tools-6.8.0-1005": "6.8.0-1005.5", "linux-image-unsigned-6.8.0-1005-azure-dbgsym": "6.8.0-1005.5", "linux-tools-6.8.0-1005-azure": "6.8.0-1005.5", "linux-buildinfo-6.8.0-1005-azure": "6.8.0-1005.5", "linux-modules-extra-6.8.0-1005-azure": "6.8.0-1005.5", "linux-cloud-tools-6.8.0-1005-azure": "6.8.0-1005.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-headers-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-image-unsigned-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-tools-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-gcp-tools-6.8.0-1005": "6.8.0-1005.5", "linux-modules-extra-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-gcp-headers-6.8.0-1005": "6.8.0-1005.5", "linux-modules-iwlwifi-6.8.0-1005-gcp": "6.8.0-1005.5", "linux-image-unsigned-6.8.0-1005-gcp-dbgsym": "6.8.0-1005.5", "linux-modules-6.8.0-1005-gcp": "6.8.0-1005.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-1003-gke": "6.8.0-1003.5", "linux-gke-tools-6.8.0-1003": "6.8.0-1003.5", "linux-modules-extra-6.8.0-1003-gke": "6.8.0-1003.5", "linux-image-unsigned-6.8.0-1003-gke-dbgsym": "6.8.0-1003.5", "linux-headers-6.8.0-1003-gke": "6.8.0-1003.5", "linux-tools-6.8.0-1003-gke": "6.8.0-1003.5", "linux-gke-headers-6.8.0-1003": "6.8.0-1003.5", "linux-modules-6.8.0-1003-gke": "6.8.0-1003.5", "linux-image-unsigned-6.8.0-1003-gke": "6.8.0-1003.5" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-headers-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-ibm-tools-common": "6.8.0-1003.3", "linux-ibm-headers-6.8.0-1003": "6.8.0-1003.3", "linux-modules-extra-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-ibm-source-6.8.0": "6.8.0-1003.3", "linux-tools-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-image-unsigned-6.8.0-1003-ibm-dbgsym": "6.8.0-1003.3", "linux-ibm-tools-6.8.0-1003": "6.8.0-1003.3", "linux-modules-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-modules-iwlwifi-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-buildinfo-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-image-unsigned-6.8.0-1003-ibm": "6.8.0-1003.3", "linux-ibm-cloud-tools-common": "6.8.0-1003.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-tools-6.8.0-25-lowlatency-64k": "6.8.0-25.25.3", "linux-modules-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-headers-6.8.0-25-lowlatency-64k": "6.8.0-25.25.3", "linux-lowlatency-tools-common": "6.8.0-25.25.3", "linux-buildinfo-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-image-unsigned-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-lowlatency-lib-rust-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-lowlatency-cloud-tools-6.8.0-25": "6.8.0-25.25.3", "linux-lowlatency-cloud-tools-common": "6.8.0-25.25.3", "linux-lowlatency-tools-host": "6.8.0-25.25.3", "linux-headers-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-lowlatency-tools-6.8.0-25": "6.8.0-25.25.3", "linux-cloud-tools-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-modules-6.8.0-25-lowlatency-64k": "6.8.0-25.25.3", "linux-tools-6.8.0-25-lowlatency": "6.8.0-25.25.3", "linux-image-unsigned-6.8.0-25-lowlatency-64k": "6.8.0-25.25.3", "linux-lowlatency-headers-6.8.0-25": "6.8.0-25.25.3", "linux-image-unsigned-6.8.0-25-lowlatency-64k-dbgsym": "6.8.0-25.25.3", "linux-image-unsigned-6.8.0-25-lowlatency-dbgsym": "6.8.0-25.25.3", "linux-buildinfo-6.8.0-25-lowlatency-64k": "6.8.0-25.25.3", "linux-modules-iwlwifi-6.8.0-25-lowlatency": "6.8.0-25.25.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-modules-nvidia-fs-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-headers-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-image-unsigned-6.8.0-1007-nvidia-dbgsym": "6.8.0-1007.7", "linux-buildinfo-6.8.0-1007-nvidia-64k": "6.8.0-1007.7", "linux-modules-6.8.0-1007-nvidia-64k": "6.8.0-1007.7", "linux-tools-6.8.0-1007-nvidia-64k": "6.8.0-1007.7", "linux-tools-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-image-unsigned-6.8.0-1007-nvidia-64k-dbgsym": "6.8.0-1007.7", "linux-headers-6.8.0-1007-nvidia-64k": "6.8.0-1007.7", "linux-modules-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-buildinfo-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-nvidia-tools-6.8.0-1007": "6.8.0-1007.7", "linux-modules-extra-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-image-unsigned-6.8.0-1007-nvidia-64k": "6.8.0-1007.7", "linux-nvidia-headers-6.8.0-1007": "6.8.0-1007.7", "linux-image-unsigned-6.8.0-1007-nvidia": "6.8.0-1007.7", "linux-nvidia-tools-host": "6.8.0-1007.7", "linux-modules-nvidia-fs-6.8.0-1007-nvidia-64k": "6.8.0-1007.7" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-nvidia-lowlatency-tools-host": "6.8.0-1009.9.1", "linux-image-unsigned-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-tools-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-image-unsigned-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-modules-nvidia-fs-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-image-unsigned-6.8.0-1009-nvidia-lowlatency-dbgsym": "6.8.0-1009.9.1", "linux-image-unsigned-6.8.0-1009-nvidia-lowlatency-64k-dbgsym": "6.8.0-1009.9.1", "linux-modules-nvidia-fs-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-modules-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-modules-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-headers-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-modules-extra-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-buildinfo-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-buildinfo-6.8.0-1009-nvidia-lowlatency-64k": "6.8.0-1009.9.1", "linux-headers-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-nvidia-lowlatency-tools-6.8.0-1009": "6.8.0-1009.9.1", "linux-tools-6.8.0-1009-nvidia-lowlatency": "6.8.0-1009.9.1", "linux-nvidia-lowlatency-headers-6.8.0-1009": "6.8.0-1009.9.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-modules-ivsc-6.8.0-1003-oem": "6.8.0-1003.3", "linux-oem-6.8-tools-6.8.0-1003": "6.8.0-1003.3", "linux-image-unsigned-6.8.0-1003-oem-dbgsym": "6.8.0-1003.3", "linux-headers-6.8.0-1003-oem": "6.8.0-1003.3", "linux-oem-6.8-headers-6.8.0-1003": "6.8.0-1003.3", "linux-tools-6.8.0-1003-oem": "6.8.0-1003.3", "linux-image-unsigned-6.8.0-1003-oem": "6.8.0-1003.3", "linux-modules-ipu6-6.8.0-1003-oem": "6.8.0-1003.3", "linux-modules-iwlwifi-6.8.0-1003-oem": "6.8.0-1003.3", "linux-buildinfo-6.8.0-1003-oem": "6.8.0-1003.3", "linux-modules-6.8.0-1003-oem": "6.8.0-1003.3" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-tools-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-image-unsigned-6.8.0-1004-oracle-dbgsym": "6.8.0-1004.4", "linux-image-unsigned-6.8.0-1004-oracle-64k-dbgsym": "6.8.0-1004.4", "linux-buildinfo-6.8.0-1004-oracle-64k": "6.8.0-1004.4", "linux-image-unsigned-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-headers-6.8.0-1004-oracle-64k": "6.8.0-1004.4", "linux-modules-extra-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-oracle-tools-6.8.0-1004": "6.8.0-1004.4", "linux-tools-6.8.0-1004-oracle-64k": "6.8.0-1004.4", "linux-modules-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-modules-6.8.0-1004-oracle-64k": "6.8.0-1004.4", "linux-modules-extra-6.8.0-1004-oracle-64k": "6.8.0-1004.4", "linux-modules-iwlwifi-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-headers-6.8.0-1004-oracle": "6.8.0-1004.4", "linux-oracle-headers-6.8.0-1004": "6.8.0-1004.4", "linux-image-unsigned-6.8.0-1004-oracle-64k": "6.8.0-1004.4" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-image-6.8.0-1002-raspi": "6.8.0-1002.2", "linux-buildinfo-6.8.0-1002-raspi": "6.8.0-1002.2", "linux-tools-6.8.0-1002-raspi": "6.8.0-1002.2", "linux-headers-6.8.0-1002-raspi": "6.8.0-1002.2", "linux-raspi-headers-6.8.0-1002": "6.8.0-1002.2", "linux-modules-6.8.0-1002-raspi": "6.8.0-1002.2", "linux-image-6.8.0-1002-raspi-dbgsym": "6.8.0-1002.2", "linux-raspi-tools-6.8.0-1002": "6.8.0-1002.2" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-20-generic": "6.8.0-20.20.1", "linux-riscv-headers-6.8.0-20": "6.8.0-20.20.1", "linux-image-6.8.0-20-generic": "6.8.0-20.20.1", "linux-modules-6.8.0-20-generic": "6.8.0-20.20.1", "linux-riscv-tools-6.8.0-20": "6.8.0-20.20.1", "linux-tools-6.8.0-20-generic": "6.8.0-20.20.1", "linux-image-6.8.0-20-generic-dbgsym": "6.8.0-20.20.1", "linux-headers-6.8.0-20-generic": "6.8.0-20.20.1" } ] }