net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Feb 1, 2018 | Dec 6, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 7, 2017 |
| Debian | — | Upgrade linux | Dec 24, 2017 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Jan 30, 2018 | Dec 6, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Jan 19, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 5, 2019 | Dec 5, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 5, 2017 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 20, 2017 | Dec 6, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1086-raspi2Upgrade linux-image-3.13.0-142-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-119-powerpc-e500mcUpgrade linux-image-3.13.0-142-generic-lpaeUpgrade linux-image-3.13.0-142-powerpc64-smpUpgrade linux-image-4.13.0-1014-azureUpgrade linux-image-3.13.0-142-powerpc-e500Upgrade linux-image-3.13.0-142-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.13.0-1016-raspi2Upgrade linux-image-4.4.0-119-powerpc64-embUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.13.0-38-lowlatencyUpgrade linux-image-3.13.0-142-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.4.0-119-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-119-powerpc-smpUpgrade linux-image-4.4.0-1054-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-142-powerpc-e500mcUpgrade linux-image-4.4.0-1016-awsUpgrade linux-image-4.13.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-4.13.0-38-genericUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1020-kvmUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-119-generic-lpaeUpgrade linux-image-4.4.0-119-genericUpgrade linux-image-3.13.0-142-genericUpgrade linux-image-4.4.0-1088-snapdragonUpgrade linux-image-4.13.0-1022-oemUpgrade linux-image-4.13.0-38-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-119-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenial | Feb 24, 2018 | Dec 6, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub