In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is used.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.178-120.178Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-devel | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-toolsUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade dtb-sprd | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1147-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-lpae | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub