An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 5, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | May 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 5, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-build | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.3.0-1026-gkeUpgrade linux-image-5.3.0-59-snapdragonUpgrade linux-image-5.3.0-1023-awsUpgrade linux-image-virtualUpgrade linux-image-5.3.0-59-genericUpgrade linux-image-5.3.0-1023-kvmUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.3.0-1026-raspi2Upgrade linux-image-5.4.0-37-genericUpgrade linux-image-gkeop-5.3Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-5.3.0-59-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gke-5.3Upgrade linux-image-5.4.0-1016-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-5.3.0-1024-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.3.0-59-lowlatencyUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-5.3.0-1028-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.3.0-1026-gcpUpgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-5.4.0-27-generic | Jun 10, 2020 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub