In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-rt | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.227-219.884Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-libbpfUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade perf-debuginfo | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-amd | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1066-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-gkeop | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub