A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.181-140.257Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools | Jun 4, 2020 | May 26, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | May 26, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 26, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernelUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Nov 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headers | Sep 28, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel | Sep 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-sourceUpgrade python3-perfUpgrade kernel-headers | Jul 31, 2020 | May 26, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Apr 27, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 26, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 26, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extra | Jun 10, 2020 | May 26, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1073-awsUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-106-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-4.4.0-1073-awsUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-62-genericUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-gkeop-5.3Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-27-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.3.0-1032-azureUpgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1087-oemUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-5.3.0-1030-gkeUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-5.4.0-1016-azureUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-5.3.0-1030-aws | Jun 10, 2020 | May 26, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub