In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.
In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:
if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernelUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extra | Nov 4, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.216-204.855Upgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools | May 22, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 13, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade dtb-apm | Jul 10, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub