In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headers | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-64kb-extra | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gcp-64kUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-fipsUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oemUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-64k-lts-24.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub