In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel6.12Upgrade python3-perfUpgrade perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perf6.12-debuginfo | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-awsUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-xilinxUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1075-gkeop | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub