In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: walk over current view on netlink dump
The generation mask can be updated while netlink dump is in progress. The pipapo set backend walk iterator cannot rely on it to infer what view of the datastructure is to be used. Add notation to specify if user wants to read/update the set.
Based on patch from Florian Westphal.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel | Nov 7, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfo | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-6.1.112-122.189Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-modules-extra | Nov 19, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanilla | Dec 5, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1061-intel-iotgUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-117-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-117-genericUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1063-gkeUpgrade linux-image-5.15.0-1063-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1059-raspiUpgrade linux-image-5.15.0-117-lowlatencyUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1061-nvidiaUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-117-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1061-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.15.0-1049-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1066-awsUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1059-ibm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub