A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-livepatch-4.14.181-140.257Upgrade perfUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.177-139.253Upgrade python-perfUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-develUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftool | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kernel-rtUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-docs-htmlUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-default-manUpgrade ocfs2-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kernel-rt_debug-extraUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kernel-debug-baseUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade dlm-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade dlm-kmp-rtUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kernel-docsUpgrade kselftests-kmp-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-vanilla-develUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-preemptUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kernel-devel-azureUpgrade kselftests-kmp-rtUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-sourceUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-develUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kernel-vanillaUpgrade gfs2-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-rt-develUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kernel-develUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-64kb-optionalUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-default-kgraftUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-default-baseUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kernel-kvmsmall-develUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kernel-64kbUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-devel-rtUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade cluster-md-kmp-rt_debug | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1089-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-gke-5.0Upgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.15.0-1067-kvm | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub