In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_set_pipapo_avx2: fix initial map fill
If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map.
The early fix was incomplete and did only fix up the generic C implementation.
A followup patch adds a test case to nft_concat_range.sh.
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.12.35-55.103Upgrade python3-perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-libbpf-debuginfo | Sep 9, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-obs-build | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-azure-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-intelUpgrade linux-image-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-aws-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-6.14Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1043-oracle | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub