An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvm | Nov 14, 2022 | Sep 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.118-111.515Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.281-212.502Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.43-20.103 | Apr 18, 2023 | Sep 1, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 18, 2023 | Jun 9, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Sep 1, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Nov 3, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftool | Oct 11, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 16, 2022 | Apr 15, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 9, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-debug-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64 | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-armUpgrade kernel-debug-baseUpgrade kernel-vanilla-develUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-alUpgrade kernel-rtUpgrade dlm-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-preemptUpgrade dtb-allwinnerUpgrade reiserfs-kmp-preemptUpgrade kernel-symsUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-extraUpgrade dtb-xilinxUpgrade kernel-docsUpgrade dtb-amd | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade linux-image-4.4.0-234-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1113-aws | Oct 1, 2022 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub