In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: drop pending enqueued packets on removal
Packets sitting in nfqueue might hold a reference to:
- templates that specify the conntrack zone, because a percpu area is used and module removal is possible. - conntrack timeout policies and helper, where object removal leave a stale reference.
Since these objects can just go away, drop enqueued packets to avoid stale reference to them.
If there is a need for finer grain removal, this logic can be revisited to make selective packet drop upon dependencies.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.204-143.230Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.253-252.1015Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 6, 2026 | May 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 5, 2026 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx | Jul 20, 2026 | May 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 12, 2026 | May 5, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub