Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: reject duplicate device on updates
A chain/flowtable update with duplicated devices in the same batch is
possible. Unfortunately, netdev event path only removes the first
device that is found, leaving unregistered the hook of the duplicated
device.
Check if a duplicated device exists in the transaction batch, bail out
with EEXIST in such case.
WARNING is hit when unregistering the hook:
[49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150
[49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full)
[...]
[49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.8 | 5.10.247 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.16.3-1 | — |
| Debian 13 | linux | 6.12.63-1 | — |
| Debian 12 | linux | 6.1.159-1 | — |
| Debian 11 | linux | 5.10.247-1 | DLA-4404-1 |
| Debian 11 | linux-6.1 | 6.1.159-1~deb11u1 | DLA-4436-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1013.17 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1081.83 | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-88.89 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1043.45 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-aws-6.14 +2 | 6.14.0-1017.17~24.04.1 | USN-7934-1, USN-7879-3 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1044.50 | USN-7935-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1046.53 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1029.32 | USN-7940-2 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1044.47 | USN-7889-4 |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | 6.14.0-1020.21~24.04.1 | USN-7879-4 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1040.45 | USN-7889-4 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1027.30 | USN-7889-4 |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | 6.14.0-36.36~24.04.1 | USN-7879-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1041.41 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-intel +12 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-88.89.1 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1043.46 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1043.46.1 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1013.13 | — |
| Ubuntu 24.04 LTS | linux-oem-6.14 | 6.14.0-1016.16 | USN-7880-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1040.41 | USN-7889-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1043.47 | USN-7889-7 |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | 6.14.0-36.36.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1020.21 | USN-7889-7 |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-163.173 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1097.104 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1043.45~22.04.1 | USN-7889-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1101.110 | USN-7910-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1044.50~22.04.1 | USN-7935-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1102.111.1 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1046.53~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1097.106 | USN-7909-4 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1044.47~22.04.1 | USN-7889-4 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1093.99 | USN-7909-4 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1080.88 | USN-7909-4 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-88.89~22.04.2 | USN-7889-6 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1091.94 | USN-7909-5, USN-7909-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1041.41~22.04.1 | USN-7889-5 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1092.98 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1089.94 | USN-7933-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-88.89.1~22.04.1 | USN-7889-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1092.93 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1043.46~22.04.1 | USN-7889-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1049.49 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1038.38 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1094.100 | USN-7909-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1040.41~22.04.1 | USN-7889-6 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-88.89~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1061.65 | USN-7909-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2034.35 | USN-7889-7 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1038.39 | USN-7889-3 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | 6.14.0-1016.16~24.04.1 | USN-7879-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1089.91 | USN-7909-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1096.105 | USN-7909-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1038.39~22.04.1 | USN-7889-3 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1043.45+fips1 | USN-7889-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1044.50+fips1 | USN-7940-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-88.89+fips1 | USN-7889-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1044.47+fips1 | USN-7889-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1097.104+fips1 | USN-7909-3 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1101.110+fips1 | USN-7910-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-163.173+fips1 | USN-7909-3 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1097.106+fips1 | USN-7909-3 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1097.104~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1102.111~20.04.1 | USN-7938-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1097.106~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-163.173~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1091.94~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1092.98~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1049.49~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1094.100~20.04.1 | USN-7909-1 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1092.96~20.04.1 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 |
| SLES 15 SP7 | kernel-azure +1 | 6.4.0-150700.20.15.2 | SUSE-SU-2025:03633-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.19.1.150700.17.13.1 | SUSE-SU-2025:03601-1 |
| SLES 15 SP7 | kernel-syms-azure | 6.4.0-150700.20.15.1 | SUSE-SU-2025:03633-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.32.coco15sp6.1 | SUSE-SU-2025:03602-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21139-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLES 16.0 | kernel-64kb +7 | 6.12.0-160000.6.1 | SUSE-SU-2025:21179-1, SUSE-SU-2025:21139-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21139-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | SUSE-SU-2025:21074-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.6.1 | SUSE-SU-2026:20560-1, SUSE-SU-2025:21074-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-35.1.21.12 | SUSE-SU-2025:20861-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 6-1.1 | SUSE-SU-2025:20918-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 11-1.1 | SUSE-SU-2025:20912-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 10-1.1 | SUSE-SU-2025:20913-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 8-1.3 | SUSE-SU-2025:20915-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 6-1.2 | SUSE-SU-2025:20917-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_10 +2 | 2-1.1 | SUSE-SU-2025:20979-1, SUSE-SU-2025:20919-1, SUSE-SU-2025:20908-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_2 +1 | 14-1.1 | SUSE-SU-2025:20920-1, SUSE-SU-2025:20909-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_4 | 12-1.2 | SUSE-SU-2025:20907-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_5 | 10-1.2 | SUSE-SU-2025:20903-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 8-3.1 | SUSE-SU-2025:20914-1, SUSE-SU-2025:20905-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_7 +3 | 7-1.2 | SUSE-SU-2025:20916-1, SUSE-SU-2025:20906-1, SUSE-SU-2025:20904-1 |
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-37.1 | SUSE-SU-2025:20898-1 |
| SLE Micro 6.1 | kernel-source +2 | 6.4.0-35.1 | SUSE-SU-2025:20861-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-35.1.21.12 | SUSE-SU-2025:20851-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_10 | 6-1.1 | SUSE-SU-2025:20879-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_4 | 11-1.1 | SUSE-SU-2025:20873-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_5 | 10-1.1 | SUSE-SU-2025:20874-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_7 | 8-1.3 | SUSE-SU-2025:20876-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0-RT_Update_9 | 6-1.2 | SUSE-SU-2025:20878-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_10 +2 | 2-1.1 | SUSE-SU-2025:20958-1, SUSE-SU-2025:20889-1, SUSE-SU-2025:20880-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_2 +1 | 14-1.1 | SUSE-SU-2025:20890-1, SUSE-SU-2025:20886-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_3 +1 | 14-1.2 | SUSE-SU-2025:20891-1, SUSE-SU-2025:20884-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_4 | 12-1.2 | SUSE-SU-2025:20885-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_5 | 10-1.2 | SUSE-SU-2025:20881-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_6 +1 | 8-3.1 | SUSE-SU-2025:20887-1, SUSE-SU-2025:20875-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_7 +3 | 7-1.2 | SUSE-SU-2025:20888-1, SUSE-SU-2025:20883-1, SUSE-SU-2025:20882-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-37.1 | SUSE-SU-2025:20870-1 |
| SLE Micro 6.0 | kernel-source +2 | 6.4.0-35.1 | SUSE-SU-2025:20851-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.109.1 | SUSE-SU-2025:3761-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.19.1 | SUSE-SU-2025:03601-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_0 | 6-150700.3.1 | SUSE-SU-2025:03650-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_5 | 1-150700.1.3.1 | SUSE-SU-2025:3725-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_0 | 6-150700.3.15.1 | SUSE-SU-2025:3765-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_1 +2 | 6-150700.2.1 | SUSE-SU-2025:3772-1, SUSE-SU-2025:3771-1, SUSE-SU-2025:03646-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_3 +3 | 2-150700.2.1 | SUSE-SU-2025:3770-1, SUSE-SU-2025:3769-1, SUSE-SU-2025:03648-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_5 | 1-150700.15.3.1 | SUSE-SU-2025:03601-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_16 | 1-150600.1.3.1 | SUSE-SU-2025:3751-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_5 | 17-150600.2.1 | SUSE-SU-2025:03638-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_10 +1 | 8-150600.2.1 | SUSE-SU-2025:3762-1, SUSE-SU-2025:03650-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_11 | 7-150600.2.1 | SUSE-SU-2025:3755-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_13 +1 | 6-150600.2.1 | SUSE-SU-2025:3764-1, SUSE-SU-2025:03646-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_14 +2 | 2-150600.2.1 | SUSE-SU-2025:3770-1, SUSE-SU-2025:3769-1, SUSE-SU-2025:03643-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_16 | 1-150600.13.3.1 | SUSE-SU-2025:03600-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_4 +1 | 19-150600.2.1 | SUSE-SU-2025:3742-1, SUSE-SU-2025:03636-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_6 | 14-150600.2.1 | SUSE-SU-2025:3748-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_9 | 9-150600.2.1 | SUSE-SU-2025:3768-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_19 +1 | 17-150500.2.1 | SUSE-SU-2025:3734-1, SUSE-SU-2025:3721-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_22 | 13-150500.2.1 | SUSE-SU-2025:3731-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_25 | 8-150500.2.1 | SUSE-SU-2025:3736-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_28 | 7-150500.2.1 | SUSE-SU-2025:3733-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_29 | 5-150500.2.1 | SUSE-SU-2025:3740-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_30 | 2-150500.2.1 | SUSE-SU-2025:3741-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 1-150500.11.3.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_31 +1 | 17-150400.2.1 | SUSE-SU-2025:3704-1, SUSE-SU-2025:3675-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_33 | 16-150400.2.1 | SUSE-SU-2025:3705-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_34 | 15-150400.2.1 | SUSE-SU-2025:3679-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_35 | 14-150400.2.1 | SUSE-SU-2025:3712-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_41 | 7-150400.2.1 | SUSE-SU-2025:3717-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_43 | 3-150400.2.1 | SUSE-SU-2025:3720-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_44 | 2-150400.2.1 | SUSE-SU-2025:3769-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 1-150400.9.3.1 | SUSE-SU-2025:03628-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.19.1 | SUSE-SU-2025:3725-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 |
| SUSE Manager Server LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Server LTS 4.3 | kernel-syms +3 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-syms +2 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.6.1.160000.2.4 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 16.0 | kernel-rt +10 | 6.12.0-160000.6.1 | openSUSE-SU-2025:20081-1 |
| openSUSE Leap 15.6 | dtb-aarch64 +10 | 6.4.0-150600.23.73.1 | SUSE-SU-2025:03600-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.52.1 | SUSE-SU-2025:03634-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.73.1.150600.12.32.1 | SUSE-SU-2025:03600-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.55.1 | SUSE-SU-2025:3751-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.63-84.121 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-1430, ALAS2023-2025-1350 |
| Amazon Linux 2023 | perf +14 | 1:6.1.159-181.297.amzn2023 | ALAS2023-2025-1350 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.63-84.121.amzn2023 | ALAS2023-2026-1430 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.117.1-1 | — |
| Azure Linux 2 (CBL-Mariner) | kernel | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-105.51.5.1.el10uek | ELSA-2026-50006, ELSA-2025-28040, ELSA-2025-28025 |
| Oracle Linux 8 | bpftool +18 | 5.15.0-315.196.5.1.el9uek | ELSA-2026-50007, ELSA-2025-28048 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
guard-wait/CVE-2025-38678_POC ★ 0 · Nov 24, 2025
maybe the first poc for CVE-2025-38678?
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- USN-7909-1 linux, linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-oracle-5.15, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7940-2 linux-azure-nvidia vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7909-3 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7909-4 linux-gcp, linux-gke, linux-gkeop vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7938-1 linux-azure-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7934-1 linux-azure, linux-azure-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7933-1 linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7940-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7935-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7909-5 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7909-2 linux-intel-iot-realtime, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7910-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7910-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7879-4 linux-gcp-6.14, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-1 linux, linux-aws, linux-aws-6.8, linux-ibm, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7879-3 linux-aws-6.14, linux-oracle-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7880-1 linux-oem-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7879-2 linux-realtime-6.14 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-4 linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-7 linux-raspi, linux-raspi-realtime, linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-3 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-5 linux-ibm-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-7889-6 linux-hwe-6.8, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- SUSE-SU-2026:20560-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- USN-7879-1 linux, linux-aws, linux-gcp, linux-hwe-6.14, linux-oracle, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Jun 3, 2026
- WID-SEC-2025-1965 Linux Kernel: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · May 11, 2026
- openSUSE-SU-2025:20081-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:3705-1 Security update for the Linux Kernel (Live Patch 33 for SLE 15 SP4) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:3734-1 Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP5) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:3764-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP6) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:3704-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15 SP4) SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21179-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21139-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21074-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20958-1 Security update for kernel-livepatch-MICRO-6-0_Update_11 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20919-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_11 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20913-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_5 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20914-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_6 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20915-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20916-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20889-1 Security update for kernel-livepatch-MICRO-6-0_Update_10 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20906-1 Security update for kernel-livepatch-MICRO-6-0_Update_9 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20917-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_9 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20884-1 Security update for kernel-livepatch-MICRO-6-0_Update_3 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20885-1 Security update for kernel-livepatch-MICRO-6-0_Update_4 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20887-1 Security update for kernel-livepatch-MICRO-6-0_Update_6 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20890-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20883-1 Security update for kernel-livepatch-MICRO-6-0_Update_8 SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20877-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_8 SUSE / openSUSE Security Updates · Mar 23, 2026
References
- https://git.kernel.org/stable/c/0521e694d5b80899fba8695881a6349f9bc538cb
- https://git.kernel.org/stable/c/4681960bc0f4f8bcc782cbf2fd205f48ad314dfd
- https://git.kernel.org/stable/c/4ce2a0c3b8497a66cfc25fc7ca3d087258a785d2
- https://git.kernel.org/stable/c/3f358a66a04513311668ea4b40f5064e253d8386
- https://git.kernel.org/stable/c/cf23d531a9d496863aa4c5a0e2f71f0a23f3df3c
- https://git.kernel.org/stable/c/d7615bde541f16517d6790412da6ec46fa8a4c1f
- https://git.kernel.org/stable/c/cf5fb87fcdaaaafec55dcc0dc5a9e15ead343973