In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_tproxy: restrict to prerouting hook
TPROXY is only allowed from prerouting, but nft_tproxy doesn't check this. This fixes a crash (null dereference) when using tproxy from e.g. output.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-ibm-5.4Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linuxUpgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcp-5.15 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub