In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.214-202.855 | Jul 9, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade perfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade ocfs2-kmp-azure | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-awsUpgrade linux-image-raspi | Jul 16, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub