In the Linux kernel, the following vulnerability has been resolved:
nbd: call genl_unregister_family() first in nbd_cleanup()
Otherwise there may be race between module removal and the handling of netlink command, which can lead to the oops as shown below:
BUG: kernel NULL pointer dereference, address: 0000000000000098 Oops: 0002 [#1] SMP PTI CPU: 1 PID: 31299 Comm: nbd-client Tainted: G E 5.14.0-rc4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:down_write+0x1a/0x50 Call Trace: start_creating+0x89/0x130 debugfs_create_dir+0x1b/0x130 nbd_start_device+0x13d/0x390 [nbd] nbd_genl_connect+0x42f/0x748 [nbd] genl_family_rcv_msg_doit.isra.0+0xec/0x150 genl_rcv_msg+0xe5/0x1e0 netlink_rcv_skb+0x55/0x100 genl_rcv+0x29/0x40 netlink_unicast+0x1a8/0x250 netlink_sendmsg+0x21b/0x430 ____sys_sendmsg+0x2a4/0x2d0 ___sys_sendmsg+0x81/0xc0 __sys_sendmsg+0x62/0xb0 __x64_sys_sendmsg+0x1f/0x30 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae Modules linked in: nbd(E-)
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.126-117.518Upgrade kernel-livepatch-4.14.285-215.501Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.50-23.125 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-hweUpgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-azure-fde-5.15Upgrade linux-iotUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-ibm-5.4Upgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-awsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-hweUpgrade linux-oracle-5.4 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub