The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
neighbour: allow NUD_NOARP entries to be forced GCed
IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that.
This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel | Aug 2, 2024 | Mar 15, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-preempt-devel | Aug 9, 2024 | Mar 15, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-awsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-aws-fips | Nov 19, 2024 | Mar 15, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub