An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write (by a user with the CAP_NET_ADMIN capability) because of a lack of headroom validation.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 5, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perf | May 27, 2020 | May 5, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | May 5, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | May 5, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 5, 2020 | May 5, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Jun 10, 2020 | May 5, 2020 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-1024-oracleUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-27-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.3.0-1028-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1015-gcpUpgrade linux-image-5.4.0-1012-raspiUpgrade linux-image-genericUpgrade linux-image-5.3.0-59-lowlatencyUpgrade linux-image-5.3.0-1026-gcpUpgrade linux-image-5.4.0-1015-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1015-kvmUpgrade linux-image-raspiUpgrade linux-image-5.3.0-59-snapdragonUpgrade linux-image-5.3.0-59-genericUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1016-azureUpgrade linux-image-gkeop-5.3Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.3.0-1023-kvmUpgrade linux-image-5.3.0-1026-raspi2Upgrade linux-image-5.3.0-1023-awsUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1015-oracleUpgrade linux-image-5.3.0-59-generic-lpaeUpgrade linux-image-5.4.0-37-genericUpgrade linux-image-gke-5.0Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-37-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-5.4.0-37-lowlatencyUpgrade linux-image-5.3.0-1026-gkeUpgrade linux-image-gcpUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.3 | Jun 10, 2020 | May 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub