In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.326-245.539Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Sep 30, 2025 | Sep 15, 2025 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-nvidiaUpgrade linux-lts-xenialUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-realtimeUpgrade linux-nvidia-tegraUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linuxUpgrade linux-nvidia-tegra-igxUpgrade linux-raspi-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.15Upgrade linux-ibm-5.4Upgrade linux-azure-fipsUpgrade linux-fips | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub