In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fix memleak in map from abort path
The delete set command does not rely on the transaction object for element removal, therefore, a combination of delete element + delete set from the abort path could result in restoring twice the refcount of the mapping.
Check for inactive element in the next generation for the delete element command in the abort path, skip restoring state if next generation bit has been already cleared. This is similar to the activate logic using the set walk iterator.
[ 6170.286929] ------------[ cut here ]------------ [ 6170.286939] WARNING: CPU: 6 PID: 790302 at net/netfilter/nf_tables_api.c:2086 nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287071] Modules linked in: [...] [ 6170.287633] CPU: 6 PID: 790302 Comm: kworker/6:2 Not tainted 6.9.0-rc3+ #365 [ 6170.287768] RIP: 0010:nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.287886] Code: df 48 8d 7d 58 e8 69 2e 3b df 48 8b 7d 58 e8 80 1b 37 df 48 8d 7d 68 e8 57 2e 3b df 48 8b 7d 68 e8 6e 1b 37 df 48 89 ef eb c4 <0f> 0b 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 0f [ 6170.287895] RSP: 0018:ffff888134b8fd08 EFLAGS: 00010202 [ 6170.287904] RAX: 0000000000000001 RBX: ffff888125bffb28 RCX: dffffc0000000000 [ 6170.287912] RDX: 0000000000000003 RSI: ffffffffa20298ab RDI: ffff88811ebe4750 [ 6170.287919] RBP: ffff88811ebe4700 R08: ffff88838e812650 R09: fffffbfff0623a55 [ 6170.287926] R10: ffffffff8311d2af R11: 0000000000000001 R12: ffff888125bffb10 [ 6170.287933] R13: ffff888125bffb10 R14: dead000000000122 R15: dead000000000100 [ 6170.287940] FS: 0000000000000000(0000) GS:ffff888390b00000(0000) knlGS:0000000000000000 [ 6170.287948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 6170.287955] CR2: 00007fd31fc00710 CR3: 0000000133f60004 CR4: 00000000001706f0 [ 6170.287962] Call Trace: [ 6170.287967] <TASK> [ 6170.287973] ? __warn+0x9f/0x1a0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.287986] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288092] ? report_bug+0x1b1/0x1e0 [ 6170.288104] ? handle_bug+0x3c/0x70 [ 6170.288112] ? exc_invalid_op+0x17/0x40 [ 6170.288120] ? asm_exc_invalid_op+0x1a/0x20 [ 6170.288132] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288243] ? nf_tables_chain_destroy+0x1f7/0x220 [nf_tables] [ 6170.288366] ? nf_tables_chain_destroy+0x2b/0x220 [nf_tables] [ 6170.288483] nf_tables_trans_destroy_work+0x588/0x590 [nf_tables]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs | Aug 12, 2024 | May 1, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-core | Aug 22, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-symsUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-default | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-kvmUpgrade linux-image-raspi | Jul 12, 2024 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub