In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: rto_min/max: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perf | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headers | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Jun 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-armUpgrade reiserfs-kmp-azure | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.4.0-1090-ibm | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub