A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-livepatch-4.14.181-140.257Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade perf | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-sourceUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python3-perf | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade ocfs2-kmp-rt_debugUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-debug-baseUpgrade kernel-rt-extraUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-rt_debug-extraUpgrade kernel-kvmsmall-baseUpgrade kernel-rtUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kselftests-kmp-rtUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kernel-vanilla-develUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kernel-64kb-extraUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-preempt-extraUpgrade kernel-default-manUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade reiserfs-kmp-rt_debugUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kselftests-kmp-rt_debugUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-docsUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kernel-symsUpgrade kernel-default-kgraftUpgrade ocfs2-kmp-rtUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade kernel-rt_debugUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade gfs2-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-default-livepatchUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kernel-vanillaUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-default-develUpgrade cluster-md-kmp-rt_debugUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-rt-develUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade reiserfs-kmp-rtUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-150_41-default | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-4.15.0-106-genericUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-aws-hweUpgrade linux-image-gke-5.0Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1089-azureUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-4.15.0-1073-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-4.4.0-184-generic-lpae | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub