The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
neighbour: allow NUD_NOARP entries to be forced GCed
IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that.
This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Aug 2, 2024 | Mar 15, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-64kb-devel | Aug 9, 2024 | Mar 15, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-raspi | Nov 19, 2024 | Mar 15, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub