In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: always walk all pending catchall elements
During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch.
If the map holding the catchall elements is also going away, its required to toggle all catchall elements and not just the first viable candidate.
Otherwise, we get: WARNING: ./include/net/netfilter/nf_tables.h:1281 at nft_data_release+0xb7/0xe0 [nf_tables], CPU#2: nft/1404 RIP: 0010:nft_data_release+0xb7/0xe0 [nf_tables] [..] __nft_set_elem_destroy+0x106/0x380 [nf_tables] nf_tables_abort_release+0x348/0x8d0 [nf_tables] nf_tables_abort+0xcf2/0x3ac0 [nf_tables] nfnetlink_rcv_batch+0x9c9/0x20e0 [..]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.18Upgrade python3-perf6.18Upgrade bpftool6.18Upgrade perf6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.18-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.18-headersUpgrade kernel6.18-toolsUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-libbpf-staticUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.12-libbpf-staticUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-modules-extraUpgrade bpftool6.12Upgrade python3-perf6.12Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-toolsUpgrade kernel6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.18-libbpfUpgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.79-101.147 | May 4, 2026 | Mar 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 19, 2026 | Jul 19, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | May 21, 2026 | Mar 20, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 20, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-185-fipsUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-6.17.0-1021-raspiUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-5.15.0-1052-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1107-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1108-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1106-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-aws-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1020-gcp-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-azure-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.17.0-1018-oracle-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-185-genericUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-azure-fde-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1103-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-183-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-183-lowlatency-64kUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-virtual-6.17Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1105-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-5.15.0-185-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-oem-6.17Upgrade linux-image-realtime-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-realtime-6.17Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1111-aws-fipsUpgrade linux-image-5.15.0-1111-awsUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-5.15.0-1106-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.17.0-40-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.17.0-40-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1103-intel-iot-realtimeUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1116-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-5.15.0-1105-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-185-generic-lpaeUpgrade linux-image-5.15.0-1106-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.17.0-1019-awsUpgrade linux-image-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-6.17Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-azure-cvmUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-1094-gkeopUpgrade linux-image-5.15.0-1074-xilinx-zynqmpUpgrade linux-image-5.15.0-1052-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.17.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1111-gcpUpgrade linux-image-6.17.0-1018-oracleUpgrade linux-image-5.15.0-1111-aws-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.17.0-1019-aws-64kUpgrade linux-image-5.15.0-1110-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-awsUpgrade linux-image-5.15.0-1116-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-6.17.0-1028-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1026-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-6.17Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.17.0-1017-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1063-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-nvidia-6.17Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-6.17.0-1020-gcpUpgrade linux-image-5.15.0-1111-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-5.15.0-1116-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1063-nvidia-tegra-rtUpgrade linux-image-raspi-realtime-6.8 | Jul 1, 2026 | Mar 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 19, 2026 | Mar 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub