In the Linux kernel, the following vulnerability has been resolved:
netfilter: allow exp not to be removed in nf_ct_find_expectation
Currently nf_conntrack_in() calling nf_ct_find_expectation() will remove the exp from the hash table. However, in some scenario, we expect the exp not to be removed when the created ct will not be confirmed, like in OVS and TC conntrack in the following patches.
This patch allows exp not to be removed by setting IPS_CONFIRMED in the status of the tmpl.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.130-139.222Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel | Jun 11, 2025 | Mar 14, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Mar 14, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 14, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1077-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1024-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1075-ibmUpgrade linux-image-5.15.0-139-generic-lpaeUpgrade linux-image-5.15.0-139-generic-64kUpgrade linux-image-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1077-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1078-intel-iotgUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1083-realtimeUpgrade linux-image-5.15.0-1083-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1065-gkeopUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-5.15.0-1083-aws-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-215-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-5.4.0-1132-kvmUpgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1024-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-139-lowlatencyUpgrade linux-image-5.4.0-1148-gcp-fipsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1082-gcp-fipsUpgrade linux-image-5.15.0-1036-nvidia-tegraUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1088-azure-fipsUpgrade linux-image-5.15.0-1080-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1091-ibmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-5.4.0-1150-azureUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-5.15.0-1077-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1088-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1088-azureUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-5.4.0-215-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-139-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1080-gkeUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-5.4.0-1148-gcpUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-139-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1082-gcpUpgrade linux-image-5.15.0-139-lowlatency-64kUpgrade linux-image-4.15.0-1188-azureUpgrade linux-image-oemUpgrade linux-image-5.4.0-1143-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1076-intel-iot-realtimeUpgrade linux-image-5.4.0-1145-aws-fipsUpgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1036-nvidia-tegra-rtUpgrade linux-image-oem-osp1Upgrade linux-image-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1079-kvmUpgrade linux-image-5.4.0-215-genericUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1145-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-1119-fipsUpgrade linux-image-4.15.0-237-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-hweUpgrade linux-image-oem-20.04d | May 7, 2025 | Mar 14, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Mar 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub