In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-headersUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade perf | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-livepatch-5.10.217-205.860Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.91-99.172Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-tools-libsUpgrade libperfUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-debug-devel | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-azure-baseUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade gfs2-kmp-azure | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub