In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-headers | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade perf | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-rt_debug-devel | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-gcpUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1066-awsUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1059-ibmUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-gcp-lts-22.04 | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub