In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade libperfUpgrade kernel-rt-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-64k-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade kernel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-core | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-rt | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-1029-azure-fde | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub