In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.153-100.162Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools | Jul 9, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-lg | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-aws-lts-22.04 | Jul 16, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub