A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.181-140.257Upgrade kernel-tools-devel | Jun 4, 2020 | May 26, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | May 26, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 26, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Nov 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo | Sep 28, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-devel | Sep 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-devel | Jul 31, 2020 | May 26, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Apr 27, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 26, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 26, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Jun 10, 2020 | May 26, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-5.4.0-27-genericUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-5.3.0-1030-awsUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1032-azureUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1016-azureUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-gke-4.15Upgrade linux-image-5.3.0-1030-gkeUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-virtualUpgrade linux-image-5.3.0-62-genericUpgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-106-genericUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-azure-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1073-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.3Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-5.4.0-1015-awsUpgrade linux-image-gkeUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-emb | Jun 10, 2020 | May 26, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub