In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: auth_enable: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optional | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub