In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: release elements in clone only from destroy path
Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice.
This fix requires:
212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
which came after:
9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-livepatch-5.10.214-202.855Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfo | Aug 28, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | Apr 15, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Apr 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-amazon | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-awsUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub