In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-modulesUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade libperf | Jun 6, 2024 | Mar 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-develUpgrade perf-debuginfo | Jul 9, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernel-libbpf | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade bpftool | Jul 23, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Jul 17, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 25, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 30, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules | Jun 17, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-debug | Apr 18, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1133-awsUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-256-genericUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-1132-oracleUpgrade linux-image-4.15.0-1163-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-4.15.0-1153-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1178-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-226-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-4.4.0-256-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-1134-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1169-awsUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-4.4.0-1171-awsUpgrade linux-image-4.15.0-226-genericUpgrade linux-image-6.5.0-1024-gcp | Jul 4, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub