In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-core | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.227-219.884 | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perfUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernelUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-modules | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-azure-fde | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub