In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: auth_enable: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.127-135.201Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perf | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-source | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-intelUpgrade linux-image-nvidia-tegraUpgrade linux-image-oemUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1147-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtime | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub