In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-zfcpdump | Aug 12, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 8, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools-debuginfo | Aug 22, 2024 | May 14, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-cavium | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-azureUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-kvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1133-azure | Jul 15, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub