In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: udp_port: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.178-120.178Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-devel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-static | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dlm-kmp-default | Mar 13, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iotg | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub