In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-core | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-devel | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-devel | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-rtUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-renesas | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-117-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-lowlatency | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub