In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
The commit mutex should not be released during the critical section between nft_gc_seq_begin() and nft_gc_seq_end(), otherwise, async GC worker could collect expired objects and get the released commit lock within the same GC sequence.
nf_tables_module_autoload() temporarily releases the mutex to load module dependencies, then it goes back to replay the transaction again. Move it at the end of the abort phase after nft_gc_seq_end() is called.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade libperfUpgrade kernel-64k-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-core | Aug 12, 2024 | Apr 25, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfo | May 21, 2024 | Apr 25, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfo | Feb 17, 2025 | Apr 24, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Apr 25, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Oct 8, 2024 | Apr 25, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 24, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 25, 2024 | Apr 25, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt | Aug 22, 2024 | Apr 25, 2024 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kselftests-kmp-64kb | Jun 13, 2024 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1115-kvmUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.5.0-1019-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.5.0-1023-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.5.0-1025-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-6.5.0-1022-awsUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-laptop-23.10Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1022-nvidiaUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-187-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.5Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1074-ibmUpgrade linux-image-6.5.0-42-generic-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1039-iotUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-187-genericUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.5.0-1016-starfiveUpgrade linux-image-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-42-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1022-nvidia-64kUpgrade linux-image-6.5.0-1025-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.5.0-1025-oracleUpgrade linux-image-5.4.0-187-generic-lpaeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1126-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1094-gkeopUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-1018-laptopUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1046-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1111-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.5.0-1023-azure-fdeUpgrade linux-image-oemUpgrade linux-image-6.5.0-42-genericUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-42-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1127-awsUpgrade linux-image-6.5.0-1023-azureUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1087-bluefieldUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1131-gcpUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-intelUpgrade linux-image-5.4.0-1132-azureUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-22.04 | Jul 4, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub