In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: release elements in clone only from destroy path
Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice.
This fix requires:
212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
which came after:
9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.153-100.162Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf | Aug 28, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 26, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-xilinxUpgrade dtb-rockchip | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-starfiveUpgrade linux-image-nvidia-6.5Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1025-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-1022-aws | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub