In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.203-156.332Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.193-149.317-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade perf | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-4.15.0-126-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1032-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-virtualUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-197-generic | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub