Vulnerabilities

CVSS

10.0 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.50%

Risk score

40.8

Published

2026-08-22

Status

Received

In the Linux kernel, the following vulnerability has been resolved: udp: fix potential use-after-free in tunnel segmentation __skb_udp_tunnel_segment() gets the UDP header before ensuring the tunnel header is in the skb head. If the pull reallocates skb->head, the saved UDP header pointer is no longer valid. Get the UDP header after the pull to avoid a potential use-after-free.

Coverage 1

threat-intel

Multiples vulnérabilités dans le noyau Linux de Debian (28 août 2026)

Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…

CERT-FR · 5d ago CriticalCVSS 9.8

CVE-2025-38525CVE-2025-40054CVE-2026-43197vulnerabilitylinuxdebian

All articles mentioning it

Advisories and references

• git.kernel.org/stable/c/19d89b13a43640b2da2f277ee462d919d988cb6f
• git.kernel.org/stable/c/1ae134c012e10384cdac420b5cc6e0615cde0b55
• git.kernel.org/stable/c/5161e67c561c4f28a5d9335a6e859b02511de92b
• git.kernel.org/stable/c/588d4a6795d99d080f74ef0b5f391ea8c453ae5d
• git.kernel.org/stable/c/64d322c288577793eedd352b96ef75234ed380fe
• git.kernel.org/stable/c/6a733a38b983d8c2e222f13968209010cf44de87
• git.kernel.org/stable/c/b3df61bb745eb5201eac22679a2839d4ccbf3442
• git.kernel.org/stable/c/d0f86fb36eb260abd10007b62c9dcc1028e03e61