In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject duplicate device on updates
A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving unregistered the hook of the duplicated device.
Check if a duplicated device exists in the transaction batch, bail out with EEXIST in such case.
WARNING is hit when unregistering the hook:
[49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150 [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full) [...] [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.197-138.220Upgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.247-246.989Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.159-181.297Upgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-develUpgrade kernel-libbpfUpgrade kernel6.12-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.63-84.121Upgrade python3-perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade perfUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade bpftool6.12-debuginfo | Jan 12, 2026 | Sep 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 15, 2025 | Dec 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 3, 2025 | Sep 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 3, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-devel-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2034-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1043-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.1-1038-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1040-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1043-raspiUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-6.8.0-1020-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1040-gkeUpgrade linux-image-6.8.0-1043-aws-fipsUpgrade linux-image-6.8.0-1044-gcp-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1044-azureUpgrade linux-image-6.8.0-1040-oracleUpgrade linux-image-6.8.0-1041-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-88-genericUpgrade linux-image-intelUpgrade linux-image-6.8.0-88-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-nvidia-64kUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1040-gke-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-88-lowlatencyUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1027-gkeopUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-88-fipsUpgrade linux-image-6.8.0-1043-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1043-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1044-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-nvidiaUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1044-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-88-lowlatency-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1092-intel-iotg | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Sep 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub