In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_nfacct: don't assume acct name is null-terminated
BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 [..] string+0x231/0x2b0 lib/vsprintf.c:721 vsnprintf+0x739/0xf00 lib/vsprintf.c:2874 [..] nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41 xt_check_match+0x3d1/0xab0 net/netfilter/x_tables.c:523
nfnl_acct_find_get() handles non-null input, but the error printk relied on its presence.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.191-132.213 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-headersUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade bpftool-debuginfoUpgrade bpftool6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-livepatch-6.1.148-173.267Upgrade kernelUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf | Sep 30, 2025 | Aug 22, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 22, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 22, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-defaultUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-man | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-azure-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-intelUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 3, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub