In the Linux kernel, the following vulnerability has been resolved:
devlink: fix netns refcount leak in devlink_nl_cmd_reload()
While preparing my patch series adding netns refcount tracking, I spotted bugs in devlink_nl_cmd_reload()
Some error paths forgot to release a refcount on a netns.
To fix this, we can reduce the scope of get_net()/put_net() section around the call to devlink_reload().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-rockchip | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub