In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: hold reference on ct until flow is released
nf_ct_put() releases the ct->ext area inmediately, the rcu typesafe semantics also allow to refer to the wrong conntrack from the flowtable datapath. Hold reference on ct until flow is released after rcu grace period.
Add rcu_barrier() on module exit path, to ensure pending flow entries are release before module goes away.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-coreUpgrade kernel-64kUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade rvUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-modules | Oct 21, 2026 | Oct 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Oct 20, 2026 | Oct 6, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 13, 2026 | Oct 6, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules | Oct 23, 2026 | Oct 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Oct 6, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub