In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_flow_offload: reset dst in route object after setting up flow
dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flow_offload_add() fails, error path releases dst twice, leading to a refcount underflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-64k-develUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade python3-perfUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-devel | Oct 28, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfo | Dec 20, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 27, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade libperfUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade rvUpgrade kernel-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-modules | Nov 4, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade cluster-md-kmp-azure | Dec 5, 2025 | Oct 17, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-intelUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15 | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub