In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.186-128.192Upgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.35-55.103Upgrade bpftool-debuginfo | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade kernel-rt_debugUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade reiserfs-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-ibmUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-azure-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-azure-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-64k | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub