In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.203-156.332Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-devel | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-4.4.0-1082-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-raspiUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1059-oracle | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub