In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: possible module reference underflow in error path
dst->ops is set on when nft_expr_clone() fails, but module refcount has not been bumped yet, therefore nft_expr_destroy() leads to module reference underflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-headersUpgrade kernelUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-raspiUpgrade linux-hwe-5.15 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub