In the Linux kernel, the following vulnerability has been resolved:
netfilter: x_tables: fix LED ID check in led_tg_check()
Syzbot has reported the following BUG detected by KASAN:
BUG: KASAN: slab-out-of-bounds in strlen+0x58/0x70 Read of size 1 at addr ffff8881022da0c8 by task repro/5879 ... Call Trace: <TASK> dump_stack_lvl+0x241/0x360 ? __pfx_dump_stack_lvl+0x10/0x10 ? __pfx__printk+0x10/0x10 ? _printk+0xd5/0x120 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x183/0x530 print_report+0x169/0x550 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x183/0x530 ? __virt_addr_valid+0x45f/0x530 ? __phys_addr+0xba/0x170 ? strlen+0x58/0x70 kasan_report+0x143/0x180 ? strlen+0x58/0x70 strlen+0x58/0x70 kstrdup+0x20/0x80 led_tg_check+0x18b/0x3c0 xt_check_target+0x3bb/0xa40 ? __pfx_xt_check_target+0x10/0x10 ? stack_depot_save_flags+0x6e4/0x830 ? nft_target_init+0x174/0xc30 nft_target_init+0x82d/0xc30 ? __pfx_nft_target_init+0x10/0x10 ? nf_tables_newrule+0x1609/0x2980 ? nf_tables_newrule+0x1609/0x2980 ? rcu_is_watching+0x15/0xb0 ? nf_tables_newrule+0x1609/0x2980 ? nf_tables_newrule+0x1609/0x2980 ? __kmalloc_noprof+0x21a/0x400 nf_tables_newrule+0x1860/0x2980 ? __pfx_nf_tables_newrule+0x10/0x10 ? __nla_parse+0x40/0x60 nfnetlink_rcv+0x14e5/0x2ab0 ? __pfx_validate_chain+0x10/0x10 ? __pfx_nfnetlink_rcv+0x10/0x10 ? __lock_acquire+0x1384/0x2050 ? netlink_deliver_tap+0x2e/0x1b0 ? __pfx_lock_release+0x10/0x10 ? netlink_deliver_tap+0x2e/0x1b0 netlink_unicast+0x7f8/0x990 ? __pfx_netlink_unicast+0x10/0x10 ? __virt_addr_valid+0x183/0x530 ? __check_object_size+0x48e/0x900 netlink_sendmsg+0x8e4/0xcb0 ? __pfx_netlink_sendmsg+0x10/0x10 ? aa_sock_msg_perm+0x91/0x160 ? __pfx_netlink_sendmsg+0x10/0x10 __sock_sendmsg+0x223/0x270 ____sys_sendmsg+0x52a/0x7e0 ? __pfx_____sys_sendmsg+0x10/0x10 __sys_sendmsg+0x292/0x380 ? __pfx___sys_sendmsg+0x10/0x10 ? lockdep_hardirqs_on_prepare+0x43d/0x780 ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 ? exc_page_fault+0x590/0x8c0 ? do_syscall_64+0xb6/0x230 do_syscall_64+0xf3/0x230 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... </TASK>
Since an invalid (without '\0' byte at all) byte sequence may be passed from userspace, add an extra check to ensure that such a sequence is rejected as possible ID and so never passed to 'kstrdup()' and further.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.355-276.618Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.355-275.603Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-275.582Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.355-275.591Upgrade perf-debuginfo | Mar 4, 2025 | Dec 27, 2024 |
| Amazon_linux | — | Upgrade kernel | Apr 18, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Apr 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-4.15.0-1188-azureUpgrade linux-image-4.15.0-237-genericUpgrade linux-image-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-4.4.0-1181-awsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-realtime | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub