In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64kUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-rt-64k-develUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade bpftool-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headers | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade ocfs2-kmp-rt | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub