In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject duplicate device on updates
A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving unregistered the hook of the duplicated device.
Check if a duplicated device exists in the transaction batch, bail out with EEXIST in such case.
WARNING is hit when unregistering the hook:
[49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150 [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full) [...] [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.197-138.220Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.247-246.989Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade perf6.12Upgrade perfUpgrade bpftool6.12-debuginfoUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernelUpgrade bpftool6.12Upgrade python3-perfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade kernel-libbpf-develUpgrade kernel6.12-libbpf-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.12.63-84.121Upgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel6.12-headersUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpfUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-develUpgrade kernel-livepatch-6.1.159-181.297Upgrade kernel6.12-tools-develUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra-common | Jan 12, 2026 | Sep 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 15, 2025 | Dec 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 3, 2025 | Sep 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 3, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-azure | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1040-gke-64kUpgrade linux-image-6.8.0-1043-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-88-lowlatencyUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1044-gcpUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1027-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-genericUpgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-nvidia-64kUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-88-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1043-nvidia-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-88-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-88-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1043-awsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-88-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1044-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1043-aws-fipsUpgrade linux-image-6.8.0-1040-gkeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1041-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.8.1-1038-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1044-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1020-xilinxUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1043-raspiUpgrade linux-image-6.8.0-1040-oracle-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1040-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1044-azureUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1043-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-2034-raspi-realtimeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.14.0-1020-gcp | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub