In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_reject: don't leak dst refcount for loopback packets
recent patches to add a WARN() when replacing skb dst entry found an old bug:
WARNING: include/linux/skbuff.h:1165 skb_dst_check_unset include/linux/skbuff.h:1164 [inline] WARNING: include/linux/skbuff.h:1165 skb_dst_set include/linux/skbuff.h:1210 [inline] WARNING: include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 net/ipv4/netfilter/nf_reject_ipv4.c:234 [..] Call Trace: nf_send_unreach+0x17b/0x6e0 net/ipv4/netfilter/nf_reject_ipv4.c:325 nft_reject_inet_eval+0x4bc/0x690 net/netfilter/nft_reject_inet.c:27 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] ..
This is because blamed commit forgot about loopback packets. Such packets already have a dst_entry attached, even at PRE_ROUTING stage.
Instead of checking hook just check if the skb already has a route attached to it.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.191-132.213Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-toolsUpgrade perfUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade python3-perfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade python3-perf-debuginfoUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.150-174.273Upgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-modules-extra-commonUpgrade bpftool6.12Upgrade perf6.12Upgrade kernelUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extra | Sep 30, 2025 | Sep 5, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qa | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-intelUpgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-virtual | Dec 5, 2025 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub