In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.234-225.895 | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-rt-extra | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-azure-cvm | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub