In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernelUpgrade libperfUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade rvUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.178-120.178Upgrade python-perf-debuginfoUpgrade kernel-headers | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.127-135.201Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade python3-perf | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade dtb-marvellUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-mediatek | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-60-genericUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1029-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-azure-nvidiaUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-6.8.0-1028-nvidia | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub