In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_CT: drop pending enqueued packets on template removal
Templates refer to objects that can go away while packets are sitting in nfqueue refer to:
- helper, this can be an issue on module removal. - timeout policy, nfnetlink_cttimeout might remove it.
The use of templates with zone and event cache filter are safe, since this just copies values.
Flush these enqueued packets in case the template rule gets removed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.15.204-143.230Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.253-252.1015Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel6.12-develUpgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade kernel-livepatch-6.1.168-202.320Upgrade perf6.12-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-tools-develUpgrade kernel-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade bpftoolUpgrade kernel6.18Upgrade kernel6.12Upgrade python3-perfUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel-develUpgrade kernel6.12-toolsUpgrade kernel6.18-libbpfUpgrade kernel-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-modules-extraUpgrade perfUpgrade kernel-livepatch-6.12.79-101.147Upgrade perf6.18-debuginfoUpgrade kernel6.18-libbpf-develUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.18Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade bpftool6.18Upgrade perf-debuginfoUpgrade kernel6.18-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool6.18-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool6.12Upgrade kernel6.18-tools-develUpgrade bpftool6.12-debuginfo | May 4, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oracle-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-intel-iot-realtime | Jul 20, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub