In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-64k-devel-matchedUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade perfUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade libperfUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-core | Aug 12, 2024 | Apr 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | May 21, 2024 | Apr 25, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfo | Feb 17, 2025 | Apr 24, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Apr 25, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 25, 2024 | Apr 25, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra | Aug 22, 2024 | Apr 25, 2024 |
| Suse | — | Upgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade dtb-socionext | Jun 13, 2024 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1074-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-187-genericUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-187-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-starfiveUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1115-kvmUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1039-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-5.4.0-1132-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1094-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-42-genericUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-187-generic-lpaeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1131-gcpUpgrade linux-image-genericUpgrade linux-image-5.4.0-1087-bluefieldUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.4.0-1126-oracleUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.4.0-1127-awsUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-5.4.0-1111-raspiUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-5.4.0-1046-xilinx-zynqmp | Jul 4, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub