In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'net' structure can be obtained from the table->data using container_of().
Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is used.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.234-225.895 | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Jun 11, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rt | Mar 12, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1007-realtime | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub