In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: discard table flag update with pending basechain deletion
Hook unregistration is deferred to the commit phase, same occurs with hook updates triggered by the table dormant flag. When both commands are combined, this results in deleting a basechain while leaving its hook still registered in the core.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-64k-modules-extraUpgrade perfUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-core | Aug 12, 2024 | May 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-devel | Apr 10, 2025 | May 19, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.87-99.174Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-devel | Feb 17, 2025 | May 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | May 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade kernel-source-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-bluefield | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub