In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: auth_enable: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.127-135.201Upgrade bpftoolUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-rt-devel | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-awsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1060-xilinx-zynqmp | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub