In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets
Userspace provides an optimized representation in case intervals are adjacent, where the end element is omitted.
The existing partial overlap detection logic skips anonymous set checks on start elements for this reason.
However, it is possible to add intervals that overlap to this anonymous where two start elements with the same, eg. A-B, A-C where C < B.
start end A B start end A C
Restore the check on overlapping start elements to report an overlap.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.202-141.223Upgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.252-250.992Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftool | Jun 17, 2026 | Jun 17, 2026 |
| Debian | — | Upgrade linux | May 28, 2026 | May 28, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azureUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-ibmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-virtual-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-virtualUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-186-generic-lpae | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub