In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a ("netfilter: nf_tables: map basechain priority to hardware priority") when nft_chain_offload_priority() returned an error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-devel | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-macros | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-azureUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-gkeop-5.15 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub