net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 1, 2018 | Dec 6, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2017 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Dec 7, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 6, 2017 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 30, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug | Jan 30, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-headers | Jan 19, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 19, 2018 | Dec 3, 2017 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 11, 2018 | Dec 6, 2017 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-obs-build | Dec 20, 2017 | Dec 6, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-3.13.0-144-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-kvmUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-azureUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-3.13.0-144-powerpc-e500mcUpgrade linux-image-3.13.0-144-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-144-powerpc-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1016-awsUpgrade linux-image-gkeUpgrade linux-image-3.13.0-144-powerpc64-smpUpgrade linux-image-3.13.0-144-powerpc-e500Upgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-144-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-144-genericUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smp-lts-xenial | Apr 25, 2018 | Dec 6, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub