In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-devel | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-preemptUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-preempt-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oem-6.14Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intelUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-aws-6.14Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1096-azure-fips | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub