A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-develUpgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.181-140.257Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.177-139.253Upgrade perf | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-headers | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade kernel-64kb-develUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade gfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-default-kgraftUpgrade kernel-debug-develUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-debugUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade gfs2-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rt_debugUpgrade kernel-vanillaUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-syms-rtUpgrade kernel-vanilla-develUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-preempt-extraUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kernel-defaultUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade dlm-kmp-rtUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kselftests-kmp-rtUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade kernel-sourceUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-docsUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kernel-rt_debug-extraUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade dlm-kmp-rt_debugUpgrade kernel-syms-azureUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rt-extraUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kernel-preempt | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-powerpc64-smpUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-awsUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1087-oemUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-4.4.0-1073-aws | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub