Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Azure kernel can crash when network table grows too large
published 1 year ago
Summary
The Linux kernel used in Azure may hit an internal error if a network filtering table becomes larger than the system can handle. This can cause the kernel to stop unexpectedly, affecting any workloads running on that server. Updating the kernel to the latest version that includes the fix eliminates the risk.
What to do
- Update azure kernel to version 6.6.126.1-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel |
< 6.6.126.1-1 Fix: upgrade to 6.6.126.1-1
|
Original advisory text
CVE-2025-38201 affecting package kernel for versions less than 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof()
when resizing hashtable because __GFP_NOWARN is unset.
Similar to:
b541ba7d1f5a ("netfilter: conntrack: clamp maximum hashtable size to INT_MAX")
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof()
when resizing hashtable because __GFP_NOWARN is unset.
Similar to:
b541ba7d1f5a ("netfilter: conntrack: clamp maximum hashtable size to INT_MAX")
References
Timeline
Published4 Jul 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-64716 · OSV
Track software like this
Free during beta