In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade rtlaUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-tools | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.127-135.201Upgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-modules-extra | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade libperf | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-macros | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub