A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade bpftoolUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade perfUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-rtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debug-core | Nov 4, 2024 | Sep 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.198-187.748Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.134-87.145Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Oct 18, 2023 | Sep 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfo | Feb 17, 2025 | Sep 27, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 14, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Sep 28, 2023 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.5.0-10-lowlatency-64kUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-gkeUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.5.0-1008-azure-fdeUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-6.5.0-1005-laptopUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1011-oracleUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-6.1.0-1024-oemUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-6.5.0-1007-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-6.5.0-1006-raspiUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-intelUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-10-genericUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.5.0-1008-gcpUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1008-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1009-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1003-starfiveUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-6.5.0-10-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-10-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1007-starfive | Oct 23, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub