A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.181-140.257Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfo | Jun 4, 2020 | May 26, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | May 26, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | May 26, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-devel | Nov 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 28, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade perf | Sep 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-source | Jul 31, 2020 | May 26, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Apr 27, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 26, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 1, 2020 | May 26, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-extra | Jun 10, 2020 | May 26, 2020 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1089-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-azureUpgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.4.0-27-genericUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-5.3.0-1030-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1030-gkeUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1016-azureUpgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1032-azureUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.4.0-37-genericUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-62-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1073-awsUpgrade linux-image-gke-5.3Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-awsUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-edge | Jun 10, 2020 | May 26, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub