In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade libperfUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-tools | Aug 12, 2024 | Apr 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | May 21, 2024 | Apr 25, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfo | Feb 17, 2025 | Apr 24, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Apr 25, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 24, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 25, 2024 | Apr 25, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel | Aug 22, 2024 | Apr 25, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-debugUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default | Jun 13, 2024 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-1046-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.4.0-1094-gkeopUpgrade linux-image-5.4.0-1126-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1111-raspiUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-intelUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.4.0-1132-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1023-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-187-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.4.0-1131-gcpUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.4.0-1087-bluefieldUpgrade linux-image-5.4.0-1127-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1074-ibmUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-187-lowlatencyUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1115-kvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-187-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1039-iotUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-aws | Jul 4, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub