In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: honor table dormant flag from netdev release event path
Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook.
[524854.857999] ------------[ cut here ]------------ [524854.858010] WARNING: CPU: 0 PID: 3386599 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x21a/0x260 [...] [524854.858848] CPU: 0 PID: 3386599 Comm: kworker/u32:2 Not tainted 6.9.0-rc3+ #365 [524854.858869] Workqueue: netns cleanup_net [524854.858886] RIP: 0010:__nf_unregister_net_hook+0x21a/0x260 [524854.858903] Code: 24 e8 aa 73 83 ff 48 63 43 1c 83 f8 01 0f 85 3d ff ff ff e8 98 d1 f0 ff 48 8b 3c 24 e8 8f 73 83 ff 48 63 43 1c e9 26 ff ff ff <0f> 0b 48 83 c4 18 48 c7 c7 00 68 e9 82 5b 5d 41 5c 41 5d 41 5e 41 [524854.858914] RSP: 0018:ffff8881e36d79e0 EFLAGS: 00010246 [524854.858926] RAX: 0000000000000000 RBX: ffff8881339ae790 RCX: ffffffff81ba524a [524854.858936] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881c8a16438 [524854.858945] RBP: ffff8881c8a16438 R08: 0000000000000001 R09: ffffed103c6daf34 [524854.858954] R10: ffff8881e36d79a7 R11: 0000000000000000 R12: 0000000000000005 [524854.858962] R13: ffff8881c8a16000 R14: 0000000000000000 R15: ffff8881351b5a00 [524854.858971] FS: 0000000000000000(0000) GS:ffff888390800000(0000) knlGS:0000000000000000 [524854.858982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [524854.858991] CR2: 00007fc9be0f16f4 CR3: 00000001437cc004 CR4: 00000000001706f0 [524854.859000] Call Trace: [524854.859006] <TASK> [524854.859013] ? __warn+0x9f/0x1a0 [524854.859027] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859044] ? report_bug+0x1b1/0x1e0 [524854.859060] ? handle_bug+0x3c/0x70 [524854.859071] ? exc_invalid_op+0x17/0x40 [524854.859083] ? asm_exc_invalid_op+0x1a/0x20 [524854.859100] ? __nf_unregister_net_hook+0x6a/0x260 [524854.859116] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859135] nf_tables_netdev_event+0x337/0x390 [nf_tables] [524854.859304] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859461] ? packet_notifier+0xb3/0x360 [524854.859476] ? _raw_spin_unlock_irqrestore+0x11/0x40 [524854.859489] ? dcbnl_netdevice_event+0x35/0x140 [524854.859507] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859661] notifier_call_chain+0x7d/0x140 [524854.859677] unregister_netdevice_many_notify+0x5e1/0xae0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules | Aug 12, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.158-103.164Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade perf | May 22, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 16, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-core | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-macros | Jul 10, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibm | Jul 16, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub