In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-tools-debuginfo | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-preemptUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-azure-5.15Upgrade linux-ibm-5.4Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-gkeop-5.15Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linuxUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-realtime | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub