In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: fix null deref on element insertion
There is no guarantee that rb_prev() will not return NULL in nft_rbtree_gc_elem():
general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] nft_add_set_elem+0x14b0/0x2990 nf_tables_newsetelem+0x528/0xb30
Furthermore, there is a possible use-after-free while iterating, 'node' can be free'd so we need to cache the next value to use.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.117-72.142 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfo | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 14, 2025 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linuxUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-nvidia-tegraUpgrade linux-ibmUpgrade linux-oracle | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub