In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.
In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:
if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernelUpgrade rvUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-rt-debug-core | Nov 4, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.216-204.855 | May 22, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 13, 2024 | May 20, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-develUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade dtb-nvidia | Jul 10, 2024 | May 20, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub