Linux Kernel Missing Initialization of a Variable Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 28/10/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| openshift container platform | ≥ 4.12, < 4.12.91≥ 4.13, < 4.13.67≥ 4.14, < 4.14.68≥ 4.15, < 4.15.65≥ 4.16, < 4.16.63≥ 4.17, < 4.17.55≥ 4.18, < 4.18.43≥ 4.19, < 4.19.33≥ 4.20, < 4.20.24≥ 4.21, < 4.21.17 | 4.12.914.13.674.14.684.15.654.16.634.17.554.18.434.19.334.20.244.21.17 |
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache-backed frags, but the shared-frag marker is currently lost. That breaks the invariant relied on by later in-place writers. In particular, ESP input checks skb_has_shared_frag() before deciding whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP receive coalescing has moved shared frags into an unmarked skb, ESP can see skb_has_shared_frag() as false and decrypt in place over page-cache backed frags. Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged frags. The tailroom copy path does not need the marker because it copies bytes into @to's linear data rather than transferring frag descriptors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free