The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-abi-whitelistsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Dec 1, 2016 | May 2, 2016 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 2, 2016 |
| Ubuntu | — | Upgrade linux-raspi2 | Nov 19, 2024 | May 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub