In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-docUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matched | Jun 6, 2024 | Mar 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.215-203.850Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Jul 9, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Jul 23, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 25, 2024 | Mar 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 30, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel | Jun 17, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-default | Apr 18, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.15.0-1132-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1133-awsUpgrade linux-image-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1163-gcpUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-4.4.0-256-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-226-genericUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-raspi2Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1169-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-1134-kvmUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-4.15.0-1178-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1153-kvmUpgrade linux-image-4.15.0-226-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1171-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.4.0-256-lowlatencyUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04 | Jul 4, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub