In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernelUpgrade kernel-cross-headersUpgrade python3-perf | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-core | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-zfcpdump | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-117-genericUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub