In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.203-156.332Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debug | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade python-perfUpgrade perfUpgrade kernel-headers | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-powerpc-smpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-smpUpgrade linux-image-oemUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-gkeUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-197-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-awsUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-azure-edgeUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-56-generic-lpae | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub