In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade libperfUpgrade rtlaUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade perfUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs | Aug 12, 2024 | Apr 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 21, 2024 | Apr 25, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-debuginfo | Feb 17, 2025 | Apr 24, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Apr 25, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | Apr 25, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernelUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debug-modules-extra | Aug 22, 2024 | Apr 25, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-preemptUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-qcom | Jun 13, 2024 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-5.4.0-1111-raspiUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1094-gkeopUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1046-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.4.0-1132-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1126-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-5.4.0-1127-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.4.0-187-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1131-gcpUpgrade linux-image-5.4.0-1087-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-5.4.0-187-genericUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1115-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1074-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-5.4.0-187-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-5.4.0-1039-iotUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-20.04 | Jul 4, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub