In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: drop pending enqueued packets on removal
Packets sitting in nfqueue might hold a reference to:
- templates that specify the conntrack zone, because a percpu area is used and module removal is possible. - conntrack timeout policies and helper, where object removal leave a stale reference.
Since these objects can just go away, drop enqueued packets to avoid stale reference to them.
If there is a need for finer grain removal, this logic can be revisited to make selective packet drop upon dependencies.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.204-143.230Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.253-252.1015Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 6, 2026 | May 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 5, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidiaUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-6.8 | Jul 20, 2026 | May 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 5, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub