In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix memleak in map from abort path
The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result in restoring twice the refcount of the mapping.
Check for inactive element in the next generation for the delete element command in the abort path, skip restoring state if next generation bit has been already cleared. This is similar to the activate logic using the set walk iterator.
[ 6170.286929] ------------[ cut here ]------------ [ 6170.286939] WARNING: CPU: 6 PID: 790302 at net/netfilter/nf_tables_api.c:2086 nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287071] Modules linked in: [...] [ 6170.287633] CPU: 6 PID: 790302 Comm: kworker/6:2 Not tainted 6.9.0-rc3+ #365 [ 6170.287768] RIP: 0010:nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287886] Code: df 48 8d 7d 58 e8 69 2e 3b df 48 8b 7d 58 e8 80 1b 37 df 48 8d 7d 68 e8 57 2e 3b df 48 8b 7d 68 e8 6e 1b 37 df 48 89 ef eb c4 <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 0f [ 6170.287895] RSP: 0018:ffff888134b8fd08 EFLAGS: 00010202 [ 6170.287904] RAX: 0000000000000001 RBX: ffff888125bffb28 RCX: dffffc0000000000 [ 6170.287912] RDX: 0000000000000003 RSI: ffffffffa20298ab RDI: ffff88811ebe4750 [ 6170.287919] RBP: ffff88811ebe4700 R08: ffff88838e812650 R09: fffffbfff0623a55 [ 6170.287926] R10: ffffffff8311d2af R11: 0000000000000001 R12: ffff888125bffb10 [ 6170.287933] R13: ffff888125bffb10 R14: dead000000000122 R15: dead000000000100 [ 6170.287940] FS: 0000000000000000(0000) GS:ffff888390b00000(0000) knlGS:0000000000000000 [ 6170.287948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 6170.287955] CR2: 00007fd31fc00710 CR3: 0000000133f60004 CR4: 00000000001706f0 [ 6170.287962] Call Trace: [ 6170.287967] <TASK> [ 6170.287973] ? __warn+0x9f/0x1a0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.288104] ? handle_bug+0x3c/0x70 [ 6170.288112] ? exc_invalid_op+0x17/0x40 [ 6170.288120] ? asm_exc_invalid_op+0x1a/0x20 [ 6170.288132] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288243] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288366] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288483] nf_tables_trans_destroy_work+0x588/0x590 [nf_tables]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade bpftool | Aug 12, 2024 | May 1, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt | Aug 22, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-rt-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-lowlatency | Jul 12, 2024 | May 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub