In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: disallow anonymous set with timeout flag
Anonymous sets are never used with timeout from userspace, reject this. Exception to this rule is NFT_SET_EVAL to ensure legacy meters still work.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade rvUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matched | Jun 6, 2024 | Mar 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-toolsUpgrade perf-debuginfo | Jul 9, 2024 | Mar 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Mar 21, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Jul 23, 2024 | Mar 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 25, 2024 | Mar 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 30, 2024 | Mar 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-modules-extra | Jun 17, 2024 | Mar 21, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-default-livepatch-devel | Apr 18, 2024 | Mar 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1132-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-4.4.0-1133-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-256-genericUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1163-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1171-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-226-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1134-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-4.15.0-1169-awsUpgrade linux-image-aws-hweUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-4.15.0-1153-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-4.15.0-1178-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-256-lowlatencyUpgrade linux-image-4.15.0-226-lowlatencyUpgrade linux-image-starfive | Jul 4, 2024 | Mar 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub