In the Linux kernel, the following vulnerability has been resolved:
mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.
- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).
The 'pernet' structure can be obtained from the table->data using container_of().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-azure | Dec 5, 2025 | Dec 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub