In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: udp_port: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftool-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-docsUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-devel | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-135-lowlatency-64k | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub