In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.193-149.317Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.203-156.332 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-debug-devel | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-devel | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1032-azureUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1103-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1100-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.4.0-1142-raspi2 | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub