A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.177-139.253Upgrade python-perfUpgrade kernel-livepatch-4.14.177-139.253-debuginfoUpgrade kernel-livepatch-4.14.181-140.257Upgrade perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.173-137.229-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.173-137.228-debuginfoUpgrade kernel-livepatch-4.14.177-139.254Upgrade kernel-livepatch-4.14.177-139.254-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.173-137.229Upgrade kernel-livepatch-4.14.173-137.228 | Jun 4, 2020 | Jun 4, 2020 |
| Amazon_linux | — | Upgrade kernel | Jun 4, 2020 | Apr 3, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 29, 2020 | Apr 28, 2020 |
| Debian | — | Upgrade linux | Jun 11, 2020 | Jun 11, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-headersUpgrade perf | Apr 21, 2020 | Apr 20, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 7, 2020 | Mar 4, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 29, 2020 | Apr 28, 2020 |
| Suse | — | Upgrade kernel-livepatch-4_12_14-197_18-defaultUpgrade kgraft-patch-4_4_121-92_104-defaultUpgrade kernel-livepatch-4_12_14-197_48-defaultUpgrade kernel-preempt-develUpgrade kgraft-patch-4_4_121-92_120-defaultUpgrade kernel-default-livepatchUpgrade kernel-livepatch-4_12_14-195-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-vanilla-baseUpgrade kernel-livepatch-4_12_14-197_21-defaultUpgrade kernel-livepatch-4_12_14-150_32-defaultUpgrade kernel-livepatch-4_12_14-150_35-defaultUpgrade kgraft-patch-4_4_121-92_146-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kgraft-patch-4_4_178-94_91-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kgraft-patch-3_12_74-60_64_124-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_4_180-94_97-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rt_debugUpgrade kgraft-patch-3_12_74-60_64_115-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-4_12_14-150_41-defaultUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_4_180-94_113-defaultUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-livepatch-4_12_14-150_27-defaultUpgrade kernel-default-kgraftUpgrade kernel-livepatch-4_12_14-150_55-defaultUpgrade kernel-macrosUpgrade kernel-develUpgrade kgraft-patch-4_4_176-94_88-defaultUpgrade kernel-rt-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kgraft-patch-4_4_121-92_117-defaultUpgrade kgraft-patch-4_4_121-92_114-defaultUpgrade kgraft-patch-4_4_121-92_141-defaultUpgrade kgraft-patch-3_12_74-60_64_124-xenUpgrade cluster-md-kmp-rt_debugUpgrade kgraft-patch-4_4_121-92_138-defaultUpgrade kernel-devel-rtUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade kernel-livepatch-4_12_14-197_34-defaultUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kgraft-patch-3_12_74-60_64_110-defaultUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kgraft-patch-3_12_74-60_64_118-defaultUpgrade kgraft-patch-4_4_121-92_109-defaultUpgrade kgraft-patch-3_12_74-60_64_115-xenUpgrade kernel-livepatch-4_12_14-197_45-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kgraft-patch-3_12_74-60_64_121-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-4_12_14-150_52-defaultUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kselftests-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-preempt-extraUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-livepatch-4_12_14-197_4-defaultUpgrade kernel-livepatch-4_12_14-197_10-defaultUpgrade kernel-default-manUpgrade kgraft-patch-4_4_180-94_107-defaultUpgrade kernel-livepatch-4_12_14-150_47-defaultUpgrade kernel-livepatch-4_12_14-150_22-defaultUpgrade kernel-sourceUpgrade kernel-livepatch-4_12_14-197_40-defaultUpgrade kernel-devel-azureUpgrade kgraft-patch-4_4_121-92_125-defaultUpgrade kgraft-patch-4_4_121-92_149-defaultUpgrade kernel-source-rtUpgrade kernel-livepatch-4_12_14-197_37-defaultUpgrade kernel-rtUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade kernel-livepatch-4_12_14-150_14-defaultUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-extraUpgrade kernel-livepatch-4_12_14-150_17-defaultUpgrade kgraft-patch-3_12_74-60_64_110-xenUpgrade kgraft-patch-4_4_180-94_100-defaultUpgrade kgraft-patch-4_4_180-94_103-defaultUpgrade kernel-livepatch-4_12_14-197_29-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-4_12_14-197_26-defaultUpgrade kernel-rt-extraUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kernel-livepatch-4_12_14-197_15-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade kernel-livepatch-4_12_14-150_38-defaultUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kgraft-patch-4_4_121-92_135-defaultUpgrade kgraft-patch-3_12_74-60_64_121-xenUpgrade kgraft-patch-3_12_74-60_64_118-xenUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kgraft-patch-4_4_121-92_129-defaultUpgrade kernel-livepatch-4_12_14-197_7-defaultUpgrade dlm-kmp-rt_debugUpgrade kselftests-kmp-rt | Apr 4, 2020 | Apr 3, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1073-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1089-azureUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-184-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-184-powerpc64-smpUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1080-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1073-awsUpgrade linux-image-4.15.0-1087-oemUpgrade linux-image-4.4.0-184-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-184-lowlatencyUpgrade linux-image-5.0.0-1059-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.4.0-184-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-106-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1134-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-106-genericUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1045-oracleUpgrade linux-image-4.15.0-1067-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1138-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1042-gkeUpgrade linux-image-4.15.0-1077-gcpUpgrade linux-image-gcpUpgrade linux-image-4.4.0-184-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-184-genericUpgrade linux-image-4.15.0-1063-gkeUpgrade linux-image-4.15.0-1063-raspi2Upgrade linux-image-4.15.0-106-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1075-kvmUpgrade linux-image-4.4.0-1109-awsUpgrade linux-image-generic-hwe-16.04 | Jun 10, 2020 | Apr 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub