An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 5, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 5, 2022 | May 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 5, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-default | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.3.0-59-generic-lpaeUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-5.3.0-59-genericUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.3.0-1026-raspi2Upgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-5.4.0-1016-azureUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1023-awsUpgrade linux-image-5.3.0-59-snapdragonUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-5.3.0-1023-kvmUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1026-gkeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1028-azureUpgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-5.4.0-27-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.3.0-1026-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.3.0-1024-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.3.0-59-lowlatencyUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-5.4.0-1015-aws | Jun 10, 2020 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub