In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_rbtree: fix null deref on element insertion
There is no guarantee that rb_prev() will not return NULL in nft_rbtree_gc_elem():
general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] nft_add_set_elem+0x14b0/0x2990 nf_tables_newsetelem+0x528/0xb30
Furthermore, there is a possible use-after-free while iterating, 'node' can be free'd so we need to cache the next value to use.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.184-174.730Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64 | Oct 24, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Nov 14, 2025 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegraUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcpUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-kvmUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-lowlatency | Oct 10, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub