In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modulesUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-rt-64k-modules-coreUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.127-135.201Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf-debuginfo | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-arm | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-intel | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub