In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: honor table dormant flag from netdev release event path
Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook.
[524854.857999] ------------[ cut here ]------------ [524854.858010] WARNING: CPU: 0 PID: 3386599 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x21a/0x260 [...] [524854.858848] CPU: 0 PID: 3386599 Comm: kworker/u32:2 Not tainted 6.9.0-rc3+ #365 [524854.858869] Workqueue: netns cleanup_net [524854.858886] RIP: 0010:__nf_unregister_net_hook+0x21a/0x260 [524854.858903] Code: 24 e8 aa 73 83 ff 48 63 43 1c 83 f8 01 0f 85 3d ff ff ff e8 98 d1 f0 ff 48 8b 3c 24 e8 8f 73 83 ff 48 63 43 1c e9 26 ff ff ff <0f> 0b 48 83 c4 18 48 c7 c7 00 68 e9 82 5b 5d 41 5c 41 5d 41 5e 41 [524854.858914] RSP: 0018:ffff8881e36d79e0 EFLAGS: 00010246 [524854.858926] RAX: 0000000000000000 RBX: ffff8881339ae790 RCX: ffffffff81ba524a [524854.858936] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881c8a16438 [524854.858945] RBP: ffff8881c8a16438 R08: 0000000000000001 R09: ffffed103c6daf34 [524854.858954] R10: ffff8881e36d79a7 R11: 0000000000000000 R12: 0000000000000005 [524854.858962] R13: ffff8881c8a16000 R14: 0000000000000000 R15: ffff8881351b5a00 [524854.858971] FS: 0000000000000000(0000) GS:ffff888390800000(0000) knlGS:0000000000000000 [524854.858982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [524854.858991] CR2: 00007fc9be0f16f4 CR3: 00000001437cc004 CR4: 00000000001706f0 [524854.859000] Call Trace: [524854.859006] <TASK> [524854.859013] ? __warn+0x9f/0x1a0 [524854.859027] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859044] ? report_bug+0x1b1/0x1e0 [524854.859060] ? handle_bug+0x3c/0x70 [524854.859071] ? exc_invalid_op+0x17/0x40 [524854.859083] ? asm_exc_invalid_op+0x1a/0x20 [524854.859100] ? __nf_unregister_net_hook+0x6a/0x260 [524854.859116] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859135] nf_tables_netdev_event+0x337/0x390 [nf_tables] [524854.859304] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859461] ? packet_notifier+0xb3/0x360 [524854.859476] ? _raw_spin_unlock_irqrestore+0x11/0x40 [524854.859489] ? dcbnl_netdevice_event+0x35/0x140 [524854.859507] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859661] notifier_call_chain+0x7d/0x140 [524854.859677] unregister_netdevice_many_notify+0x5e1/0xae0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade libperfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules | Aug 12, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfo | May 22, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-modules-extra-commonUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-devel | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 16, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade python3-perfUpgrade kernel-debugUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade rtlaUpgrade bpftoolUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-devel | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdso | Jul 10, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspi | Jul 16, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
