In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade perf | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade python-perf-debuginfoUpgrade kernel-debuginfo | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpf-devel | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfo | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmall | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub