In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject mismatching sum of field_len with set key length
The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapo_init(). The set key length provides the total size of the key aligned to 32-bits.
Register-based arithmetics still allows for combining mismatching set key length and field length description, eg. set key length 10 and field description [ 5, 4 ] leading to pipapo width of 12.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade libperfUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-devel | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.15.179-121.185Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.235-227.919Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | May 22, 2025 | Mar 6, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jun 11, 2025 | Mar 6, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Mar 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Dec 12, 2025 | Oct 23, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Oct 24, 2025 | Oct 23, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Mar 6, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Mar 6, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-debuginfoUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-aws-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-6.8Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1031-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8 | May 20, 2025 | Mar 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub