In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
It seems to me that percpu memory for chain stats started leaking since commit 3bc158f8d0330f0a ("netfilter: nf_tables: map basechain priority to hardware priority") when nft_chain_offload_priority() returned an error.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.73-48.135Upgrade bpftoolUpgrade perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-64kb-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-ibmUpgrade linux-gkeop-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub