In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is used.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-devel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade perf | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-apm | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-aws-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub