In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-headersUpgrade kernel-debuginfo | Jul 9, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-docsUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade kernel-debugUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-azureUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04a | Jul 16, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub