net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 1, 2018 | Dec 6, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2017 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Dec 7, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 6, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perf | Jan 30, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | Jan 19, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 19, 2018 | Dec 3, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 11, 2018 | Dec 6, 2017 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-docs | Dec 20, 2017 | Dec 6, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-144-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-144-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-144-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-3.13.0-144-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-3.13.0-144-powerpc-e500mcUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-azureUpgrade linux-image-3.13.0-144-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-kvmUpgrade linux-image-3.13.0-144-lowlatencyUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-3.13.0-144-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenial | Apr 25, 2018 | Dec 6, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub