The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service (NULL pointer dereference) by leveraging the CAP_NET_RAW or CAP_NET_ADMIN capability, related to arpt_do_table in net/ipv4/netfilter/arp_tables.c, ipt_do_table in net/ipv4/netfilter/ip_tables.c, and ip6t_do_table in net/ipv6/netfilter/ip6_tables.c.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Mar 2, 2018 |
| Debian | — | Upgrade linux | May 2, 2018 | Mar 2, 2018 |
| Redhat_linux | — | Upgrade kernel | Oct 31, 2018 | Mar 2, 2018 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-base | May 19, 2018 | Mar 2, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1022-awsUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-127-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-127-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-127-genericUpgrade linux-image-4.4.0-1093-snapdragonUpgrade linux-image-4.4.0-1060-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1026-kvmUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-127-lowlatencyUpgrade linux-image-4.4.0-127-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-127-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-127-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1090-raspi2Upgrade linux-image-kvm | May 29, 2018 | Mar 2, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub