In the Linux kernel, the following vulnerability has been resolved:
net: fix information leakage in /proc/net/ptype
In one net namespace, after creating a packet socket without binding it to a device, users in other net namespaces can observe the new `packet_type` added by this packet socket by reading `/proc/net/ptype` file. This is minor information leakage as packet socket is namespace aware.
Add a net pointer in `packet_type` to keep the net namespace of of corresponding packet socket. In `ptype_seq_show`, this net pointer must be checked when it is not NULL.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug | Aug 12, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfo | Dec 12, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftool | Dec 12, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo | Aug 22, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-azure-4.15Upgrade linuxUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-ibm-5.4 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub