In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-rt-64k-modulesUpgrade kernelUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.127-135.201Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-devel | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-source | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-genericUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1029-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-6.11.0-1007-realtime | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub