In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release flow rule object from commit path
No need to postpone this to the commit release path, since no packets are walking over this object, this is accessed from control plane only. This helped uncovered UAF triggered by races with the netlink notifier.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.15.79-51.138Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-nvidiaUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-realtimeUpgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-gke | May 6, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub