In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: auth_enable: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.234-225.895Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-obs-build | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-oemUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64k | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub