In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: auth_enable: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-static | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rt | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-azure-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1147-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oemUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub