Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rtUpgrade kernel-64kUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matched | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.120-74.144Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.320-242.534Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfo | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_90_1 | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-core | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade dtb-alUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-preemptUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-vanillaUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-vanilla-baseUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-devel | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-ibmUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-1159-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-serverUpgrade linux-image-oemUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-155-genericUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-dell300xUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.15.0-78-lowlatency-64k | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub