In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix Use-After-Free in ovs_ct_exit
Since kfree_rcu, which is called in the hlist_for_each_entry_rcu traversal of ovs_ct_limit_exit, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-rt-kvm | Aug 12, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-5.15.158-103.164Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Apr 10, 2025 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-develUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 14, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jul 17, 2024 | May 14, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 8, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-modules | Aug 22, 2024 | May 14, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-hisilicon | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-virtualUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpae | Jul 15, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub