In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: release elements in clone only from destroy path
Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice.
This fix requires:
212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
which came after:
9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-livepatch-5.10.214-202.855Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo | Aug 28, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfo | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-sprd | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-starfiveUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-intelUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1025-oemUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-42-genericUpgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-oem-22.04b | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub