In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azure | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1147-azureUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oemUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-azure-lts-20.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub