In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix memleak in map from abort path
The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result in restoring twice the refcount of the mapping.
Check for inactive element in the next generation for the delete element command in the abort path, skip restoring state if next generation bit has been already cleared. This is similar to the activate logic using the set walk iterator.
[ 6170.286929] ------------[ cut here ]------------ [ 6170.286939] WARNING: CPU: 6 PID: 790302 at net/netfilter/nf_tables_api.c:2086 nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287071] Modules linked in: [...] [ 6170.287633] CPU: 6 PID: 790302 Comm: kworker/6:2 Not tainted 6.9.0-rc3+ #365 [ 6170.287768] RIP: 0010:nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287886] Code: df 48 8d 7d 58 e8 69 2e 3b df 48 8b 7d 58 e8 80 1b 37 df 48 8d 7d 68 e8 57 2e 3b df 48 8b 7d 68 e8 6e 1b 37 df 48 89 ef eb c4 <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 0f [ 6170.287895] RSP: 0018:ffff888134b8fd08 EFLAGS: 00010202 [ 6170.287904] RAX: 0000000000000001 RBX: ffff888125bffb28 RCX: dffffc0000000000 [ 6170.287912] RDX: 0000000000000003 RSI: ffffffffa20298ab RDI: ffff88811ebe4750 [ 6170.287919] RBP: ffff88811ebe4700 R08: ffff88838e812650 R09: fffffbfff0623a55 [ 6170.287926] R10: ffffffff8311d2af R11: 0000000000000001 R12: ffff888125bffb10 [ 6170.287933] R13: ffff888125bffb10 R14: dead000000000122 R15: dead000000000100 [ 6170.287940] FS: 0000000000000000(0000) GS:ffff888390b00000(0000) knlGS:0000000000000000 [ 6170.287948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 6170.287955] CR2: 00007fd31fc00710 CR3: 0000000133f60004 CR4: 00000000001706f0 [ 6170.287962] Call Trace: [ 6170.287967] <TASK> [ 6170.287973] ? __warn+0x9f/0x1a0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.288104] ? handle_bug+0x3c/0x70 [ 6170.288112] ? exc_invalid_op+0x17/0x40 [ 6170.288120] ? asm_exc_invalid_op+0x1a/0x20 [ 6170.288132] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288243] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288366] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288483] nf_tables_trans_destroy_work+0x588/0x590 [nf_tables]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-rt-debug-modules-extra | Aug 12, 2024 | May 1, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extra | Aug 22, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-appleUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-oracle-64k | Jul 12, 2024 | May 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub