In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: set dormant flag on hook register failure
We need to set the dormant flag again if we fail to register the hooks.
During memory pressure hook registration can fail and we end up with a table marked as active but no registered hooks.
On table/base chain deletion, nf_tables will attempt to unregister the hook again which yields a warn splat from the nftables core.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.213-201.855 | Aug 28, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.82-99.168Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade python3-perf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-renesasUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-raspiUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-ibm-lts-20.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub