Linux vulnerability

What happened

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Publish new hooks in the list into the basechain/flowtable using splice_list_rcu() to ensure netlink dump list traversal via rcu is safe while concurrent ruleset update is going on.

Affected versions

Linux: 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before ed8d3bd8272e49ea987100de2abfb13710329a9b (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before 8fdd2204503ab1ce07dc000c277e2c3edf96a67b (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before 5593c640f9daedec8de61555c41e1019fa675aa6 (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before 00e370627f2e1fb3585f9d26348b1abddc75442b (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before 28ecfb3d1fe8dea70319de7051cb6718c25b5b52 (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before a557816c6e38e9473d99aa9ea8c662f55fc85847 (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before 1346be9379639c30877083b12747d4eacb83c24f (git); 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 through before a6134e62dba2ea4f760b29d5226907f447c92400 (git); 5.8 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.