In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as maximum size for the conntrack hashtable. Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. See:
0708a0afe291 ("mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls")
Note: hashtable resize is only possible from init_netns.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade libperfUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade perfUpgrade rvUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.178-120.178Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.234-225.895Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo | Mar 14, 2025 | Jan 19, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.127-135.201 | Mar 27, 2025 | Jan 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 10, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Apr 11, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 7, 2025 | Jan 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Jan 19, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Jan 19, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jan 19, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade libperfUpgrade perf-debuginfoUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-uki-virt-addons | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-source-azure | Jun 18, 2025 | Jan 19, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-awsUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-realtime-hwe-24.04 | Mar 28, 2025 | Jan 19, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub