In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH
The XT_HASHLIMIT_RATE_MATCH flag mode changes the semantics of the dsthash_ent structure which represents an entry in the hashtable. There is a union area which uses a different layout to express the rate match mode.
Update .checkentry path to validate the XT_HASHLIMIT_RATE_MATCH mode flag is requested by two or more different rules that refer to the same hashtable. Otherwise, uninitialized access to the burst field in the union is possible.
Reject the use of the XT_HASHLIMIT_RATE_MATCH mode flag if set on by revision less than 3 too.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade python3-perf6.18Upgrade kernel6.12-tools-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18Upgrade kernel6.12-headersUpgrade kernel6.18-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade perf6.18Upgrade perf6.12Upgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade python3-perf6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.18.44-99.149Upgrade kernel-livepatch-6.12.103-127.188Upgrade kernel6.12-develUpgrade kernel6.18-tools-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade bpftool6.18-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12 | Sep 1, 2026 | Aug 15, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 26, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-fips-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-realtimeUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-gcp-5.15Upgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-198-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-aws-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-azureUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-intelUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2026 | Aug 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub