In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel6.12Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade perf6.12Upgrade kernel-livepatch-6.12.35-55.103Upgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfo | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade dtb-armUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-preempt-develUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-kvmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-virtual-6.14Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub