In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.234-225.895Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-static | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dtb-sprd | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-bluefieldUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-lts-22.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub