In the Linux kernel, the following vulnerability has been resolved:
neighbour: allow NUD_NOARP entries to be forced GCed
IFF_POINTOPOINT interfaces use NUD_NOARP entries for IPv6. It's possible to fill up the neighbour table with enough entries that it will overflow for valid connections after that.
This behaviour is more prevalent after commit 58956317c8de ("neighbor: Improve garbage collection") is applied, as it prevents removal from entries that are not NUD_FAILED, unless they are more than 5s old.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-devel | Aug 2, 2024 | Mar 15, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 15, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-devel | Aug 9, 2024 | Mar 15, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Mar 15, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub