The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released
nf_ct_put() releases the ct->ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference on ct until flow is released after rcu grace period.
Add rcu_barrier() on module exit path, to ensure pending flow entries are release before module goes away.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debugUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernelUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-rt-64k-develUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade bpftool | Oct 21, 2026 | Oct 20, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Oct 20, 2026 | Oct 6, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 13, 2026 | Oct 6, 2026 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-core | Oct 23, 2026 | Oct 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Oct 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub