net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 1, 2018 | Dec 6, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perf | Jan 30, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perf | Jan 19, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 5, 2019 | Dec 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 5, 2017 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-source-azure | Dec 20, 2017 | Dec 6, 2017 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500 | Feb 24, 2018 | Dec 6, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub