Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modules-core | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.184-175.749Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-headersUpgrade kernel-livepatch-5.15.120-74.144 | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.38-59.109Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_88_1 | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade bpftool | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade kernel-azure-baseUpgrade kernel-vanilla-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-kvmsmall-baseUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-alUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-debug-baseUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-zfcpdump-manUpgrade kernel-rt-vdso | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1168-azureUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.0.0-1020-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.17.0-1035-oemUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-genericUpgrade linux-image-serverUpgrade linux-image-intelUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-dell300xUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragonUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-oemUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-6.2.0-1008-aws | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub