In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.144-170.251Upgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-tools | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-intelUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmp | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub