An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 27, 2020 | Aug 27, 2019 |
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 27, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-sourceUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libs | Mar 23, 2020 | Aug 27, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 3, 2019 | Aug 27, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Aug 27, 2019 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Mar 27, 2020 | Aug 27, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade kernel-obs-build | Sep 21, 2019 | Aug 27, 2019 |
| Ubuntu | — | Upgrade linux-gcp-edgeUpgrade linux-lts-xenialUpgrade linux-gke-4.15Upgrade linux-oem-osp1Upgrade linux-gke-5.0Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-hwe-edgeUpgrade linux-awsUpgrade linux-azure-edgeUpgrade linux-oemUpgrade linux-hweUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-snapdragonUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-raspi2Upgrade linux-azureUpgrade linux-oracle | Nov 19, 2024 | Aug 27, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 27, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub