In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().
skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-docUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extra | Dec 24, 2024 | Nov 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo | Mar 14, 2025 | Nov 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.119-129.201Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Mar 27, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 18, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2024 | Nov 9, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 10, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oemUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1070-ibm | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub