In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_limit: reject configurations that cause integer overflow
Reject bogus configs where internal token counter wraps around. This only occurs with very very large requests, such as 17gbyte/s.
Its better to reject this rather than having incorrect ratelimit.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matched | Nov 4, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.77-99.164Upgrade python3-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jul 16, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 23, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 17, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-intelUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oem-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1017-laptop | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub