In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade perfUpgrade kernel-devel-matchedUpgrade libperfUpgrade bpftoolUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernelUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headers | Aug 12, 2024 | Apr 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 21, 2024 | Apr 25, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-modules-extraUpgrade kernel-libbpf-devel | Feb 17, 2025 | Apr 24, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Apr 25, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Apr 25, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade perf | Aug 22, 2024 | Apr 25, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-default-devel | Jun 13, 2024 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1126-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1127-awsUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1046-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1094-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.4.0-187-generic-lpaeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1111-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1087-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-1132-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-5.4.0-1131-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-187-genericUpgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1115-kvmUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-187-lowlatencyUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1039-iotUpgrade linux-image-6.5.0-1022-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1074-ibmUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gkeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-189-generic | Jul 4, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub