In the Linux kernel, the following vulnerability has been resolved:
wireguard: netlink: access device through ctx instead of peer
The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.215-203.850Upgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 14, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpfUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-static | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-default-extra | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub