In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.probe_interval' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade bpftool | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade dlm-kmp-64kb | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-generic | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub