In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: fix null deref on element insertion
There is no guarantee that rb_prev() will not return NULL in nft_rbtree_gc_elem():
general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] nft_add_set_elem+0x14b0/0x2990 nf_tables_newsetelem+0x528/0xb30
Furthermore, there is a possible use-after-free while iterating, 'node' can be free'd so we need to cache the next value to use.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.117-72.142Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfo | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 14, 2025 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-kvmUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fde | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub