In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.35-55.103 | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-156-generic-lpae | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub