A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.181-140.257Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perf | Jun 4, 2020 | May 26, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | May 26, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 1, 2020 | May 26, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-libs | Nov 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perf | Sep 28, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libs | Sep 3, 2020 | May 26, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftool | Jul 31, 2020 | May 26, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 12, 2020 | Apr 27, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 26, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Oct 1, 2020 | May 26, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-build | Jun 10, 2020 | May 26, 2020 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-gkeop-5.3Upgrade linux-image-5.3.0-1028-raspi2Upgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1024-kvmUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-edgeUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-5.3.0-62-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.3Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-5.0.0-1063-oem-osp1Upgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1073-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.3.0-62-genericUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1016-azureUpgrade linux-image-azureUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-1030-gcpUpgrade linux-image-5.3.0-1030-gkeUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-27-genericUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-5.3.0-62-lowlatencyUpgrade linux-image-5.3.0-1028-oracleUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-62-generic-lpaeUpgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-5.0.0-1043-gkeUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.3.0-1030-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1089-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-5.3.0-1032-azure | Jun 10, 2020 | May 26, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub