In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: honor table dormant flag from netdev release event path
Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook.
[524854.857999] ------------[ cut here ]------------ [524854.858010] WARNING: CPU: 0 PID: 3386599 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x21a/0x260 [...] [524854.858848] CPU: 0 PID: 3386599 Comm: kworker/u32:2 Not tainted 6.9.0-rc3+ #365 [524854.858869] Workqueue: netns cleanup_net [524854.858886] RIP: 0010:__nf_unregister_net_hook+0x21a/0x260 [524854.858903] Code: 24 e8 aa 73 83 ff 48 63 43 1c 83 f8 01 0f 85 3d ff ff ff e8 98 d1 f0 ff 48 8b 3c 24 e8 8f 73 83 ff 48 63 43 1c e9 26 ff ff ff <0f> 0b 48 83 c4 18 48 c7 c7 00 68 e9 82 5b 5d 41 5c 41 5d 41 5e 41 [524854.858914] RSP: 0018:ffff8881e36d79e0 EFLAGS: 00010246 [524854.858926] RAX: 0000000000000000 RBX: ffff8881339ae790 RCX: ffffffff81ba524a [524854.858936] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881c8a16438 [524854.858945] RBP: ffff8881c8a16438 R08: 0000000000000001 R09: ffffed103c6daf34 [524854.858954] R10: ffff8881e36d79a7 R11: 0000000000000000 R12: 0000000000000005 [524854.858962] R13: ffff8881c8a16000 R14: 0000000000000000 R15: ffff8881351b5a00 [524854.858971] FS: 0000000000000000(0000) GS:ffff888390800000(0000) knlGS:0000000000000000 [524854.858982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [524854.858991] CR2: 00007fc9be0f16f4 CR3: 00000001437cc004 CR4: 00000000001706f0 [524854.859000] Call Trace: [524854.859006] <TASK> [524854.859013] ? __warn+0x9f/0x1a0 [524854.859027] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859044] ? report_bug+0x1b1/0x1e0 [524854.859060] ? handle_bug+0x3c/0x70 [524854.859071] ? exc_invalid_op+0x17/0x40 [524854.859083] ? asm_exc_invalid_op+0x1a/0x20 [524854.859100] ? __nf_unregister_net_hook+0x6a/0x260 [524854.859116] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859135] nf_tables_netdev_event+0x337/0x390 [nf_tables] [524854.859304] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859461] ? packet_notifier+0xb3/0x360 [524854.859476] ? _raw_spin_unlock_irqrestore+0x11/0x40 [524854.859489] ? dcbnl_netdevice_event+0x35/0x140 [524854.859507] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859661] notifier_call_chain+0x7d/0x140 [524854.859677] unregister_netdevice_many_notify+0x5e1/0xae0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade rvUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade perfUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matched | Aug 12, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-headers | May 22, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.90-99.173Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-devel | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 16, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-debuginfoUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade python3-perfUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-core | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rt | Jul 10, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke | Jul 16, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub