In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is used.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdso | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-211-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intelUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1029-azure | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub