In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.probe_interval' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-common | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-rockchip | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-60-lowlatency | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub