A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.181-140.257Upgrade python-perfUpgrade kernel-livepatch-4.14.177-139.253Upgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-devel | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade kernel-toolsUpgrade python3-perf | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade kernel-sourceUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kernel-vanilla-develUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade kselftests-kmp-rt_debugUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade dlm-kmp-rtUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-azure-baseUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rt-extraUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade kernel-preempt-extraUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kernel-azureUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kernel-syms-azureUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kernel-rt_debug-extraUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kernel-default-kgraftUpgrade reiserfs-kmp-defaultUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-source-azureUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kernel-symsUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-devel-rtUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-livepatch-4_12_14-150_55-default | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-4.4.0-1073-awsUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1073-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-azure-edgeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-gke-4.15Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-lowlatency-lts-xenial | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub