A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.181-140.257Upgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade perf | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-headersUpgrade kernel-tools | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-kgraftUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-debugUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kernel-64kbUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade kernel-default-optionalUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rt_debugUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-vanillaUpgrade cluster-md-kmp-rt_debugUpgrade kernel-devel-rtUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade cluster-md-kmp-rtUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade dlm-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kernel-source-rtUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kernel-azure-baseUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-sourceUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-syms-rtUpgrade kernel-vanilla-develUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-docsUpgrade kernel-debug-baseUpgrade kernel-rt-extraUpgrade kernel-preemptUpgrade kernel-rt_debug-extraUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kgraft-patch-4_4_180-94_103-default | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1087-oemUpgrade linux-image-gkeUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1089-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-azure-edgeUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-106-generic | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub