In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extra | Aug 12, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfo | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.90-99.173Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 8, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-devel | Aug 22, 2024 | May 14, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanilla | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azureUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1062-gke | Jul 15, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub