In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-core | Aug 12, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-headers | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.90-99.173Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 8, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-devel | Aug 22, 2024 | May 14, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdso | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1112-raspi | Jul 15, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub