In the Linux kernel, the following vulnerability has been resolved:
rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The per-netns structure can be obtained from the table->data using container_of(), then the 'net' one can be retrieved from the listen socket (if available).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-alteraUpgrade cluster-md-kmp-azure | Apr 9, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-azure-lts-24.04 | Mar 28, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub