An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-extraUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-modules | Sep 26, 2024 | Jan 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.205-195.804-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.330-250.540Upgrade kernel-livepatch-4.14.328-248.540Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.327-246.539-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-livepatch-4.14.334-252.552-debuginfoUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-livepatch-5.10.205-195.807-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-livepatch-4.14.330-250.540-debuginfoUpgrade kernel-livepatch-4.14.327-246.539Upgrade kernel-livepatch-4.14.336-255.557Upgrade python-perfUpgrade kernel-livepatch-4.14.336-253.554-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.205-195.807Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.336-253.554Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.328-248.540-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.334-252.552 | Feb 7, 2024 | Jan 12, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Jan 12, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | May 31, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Apr 9, 2024 | Jan 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2024 | Jan 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jan 12, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-devel | Oct 2, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade reiserfs-kmp-default | Feb 15, 2024 | Jan 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1029-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1052-awsUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.4.0-170-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-oemUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-intelUpgrade linux-image-5.4.0-1122-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1117-awsUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-5.15.0-1049-gke | Jan 26, 2024 | Jan 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub