In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: set dormant flag on hook register failure
We need to set the dormant flag again if we fail to register the hooks.
During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks.
On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.152-100.162Upgrade bpftool-debuginfo | Aug 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-symsUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade gfs2-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.15.0-112-generic | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub