In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rt | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oemUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-kvm | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub