In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.probe_interval' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-64kb-optional | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1022-realtime | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub