In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo | Jul 9, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-symsUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-macros | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04 | Jul 16, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub