An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-develUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules | Nov 14, 2022 | Sep 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.281-212.502Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.43-20.103Upgrade perf-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-devel | Apr 18, 2023 | Sep 1, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 18, 2023 | Jun 9, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Sep 1, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Nov 3, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool | Oct 11, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 16, 2022 | Apr 15, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 9, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade kernel-preempt-develUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dtb-amazonUpgrade cluster-md-kmp-preemptUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-preemptUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-vanilla-baseUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdump-manUpgrade kernel-azure-extraUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dlm-kmp-preemptUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade dtb-alUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-rtUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-nvidia | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-234-generic | Oct 1, 2022 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub