In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.234-225.895Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-devel | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-default-manUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kb | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-nvidia-64k | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub