A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.145-95.156Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headers | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-devel | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1016-azureUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.1.0-1033-oemUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-virtualUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1127-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1058-azure | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub