In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.probe_interval' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-default | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1077-intel-iotg | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub