In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: honor table dormant flag from netdev release event path
Check for table dormant flag otherwise netdev release event path tries to unregister an already unregistered hook.
[524854.857999] ------------[ cut here ]------------ [524854.858010] WARNING: CPU: 0 PID: 3386599 at net/netfilter/core.c:501 __nf_unregister_net_hook+0x21a/0x260 [...] [524854.858848] CPU: 0 PID: 3386599 Comm: kworker/u32:2 Not tainted 6.9.0-rc3+ #365 [524854.858869] Workqueue: netns cleanup_net [524854.858886] RIP: 0010:__nf_unregister_net_hook+0x21a/0x260 [524854.858903] Code: 24 e8 aa 73 83 ff 48 63 43 1c 83 f8 01 0f 85 3d ff ff ff e8 98 d1 f0 ff 48 8b 3c 24 e8 8f 73 83 ff 48 63 43 1c e9 26 ff ff ff <0f> 0b 48 83 c4 18 48 c7 c7 00 68 e9 82 5b 5d 41 5c 41 5d 41 5e 41 [524854.858914] RSP: 0018:ffff8881e36d79e0 EFLAGS: 00010246 [524854.858926] RAX: 0000000000000000 RBX: ffff8881339ae790 RCX: ffffffff81ba524a [524854.858936] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff8881c8a16438 [524854.858945] RBP: ffff8881c8a16438 R08: 0000000000000001 R09: ffffed103c6daf34 [524854.858954] R10: ffff8881e36d79a7 R11: 0000000000000000 R12: 0000000000000005 [524854.858962] R13: ffff8881c8a16000 R14: 0000000000000000 R15: ffff8881351b5a00 [524854.858971] FS: 0000000000000000(0000) GS:ffff888390800000(0000) knlGS:0000000000000000 [524854.858982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [524854.858991] CR2: 00007fc9be0f16f4 CR3: 00000001437cc004 CR4: 00000000001706f0 [524854.859000] Call Trace: [524854.859006] <TASK> [524854.859013] ? __warn+0x9f/0x1a0 [524854.859027] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859044] ? report_bug+0x1b1/0x1e0 [524854.859060] ? handle_bug+0x3c/0x70 [524854.859071] ? exc_invalid_op+0x17/0x40 [524854.859083] ? asm_exc_invalid_op+0x1a/0x20 [524854.859100] ? __nf_unregister_net_hook+0x6a/0x260 [524854.859116] ? __nf_unregister_net_hook+0x21a/0x260 [524854.859135] nf_tables_netdev_event+0x337/0x390 [nf_tables] [524854.859304] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859461] ? packet_notifier+0xb3/0x360 [524854.859476] ? _raw_spin_unlock_irqrestore+0x11/0x40 [524854.859489] ? dcbnl_netdevice_event+0x35/0x140 [524854.859507] ? __pfx_nf_tables_netdev_event+0x10/0x10 [nf_tables] [524854.859661] notifier_call_chain+0x7d/0x140 [524854.859677] unregister_netdevice_many_notify+0x5e1/0xae0
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-core | Aug 12, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.158-103.164 | May 22, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 11, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 9, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 16, 2024 | May 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade rtlaUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virt | Aug 22, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-source-vanilla | Jul 10, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gcpUpgrade linux-image-intel | Jul 16, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub