In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: release elements in clone only from destroy path
Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice.
This fix requires:
212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
which came after:
9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-livepatch-5.15.153-100.162Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headers | Aug 28, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade dtb-apple | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-42-genericUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.8.0-35-generic | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub