In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
If nf_conntrack_init_start() fails (for example due to a register_nf_conntrack_bpf() failure), the nf_conntrack_helper_fini() clean-up path frees the nf_ct_helper_hash map.
When built with NF_CONNTRACK=y, further netfilter modules (e.g: netfilter_conntrack_ftp) can still be loaded and call nf_conntrack_helpers_register(), independently of whether nf_conntrack initialized correctly. This accesses the nf_ct_helper_hash dangling pointer and causes a uaf, possibly leading to random memory corruption.
This patch guards nf_conntrack_helper_register() from accessing a freed or uninitialized nf_ct_helper_hash pointer and fixes possible uses-after-free when loading a conntrack module.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-headersUpgrade kernel-libbpf-static | Oct 24, 2025 | Oct 7, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Feb 3, 2026 | Jan 30, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-lowlatencyUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-nvidia-tegra-igxUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure | Oct 10, 2025 | Oct 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub