In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-livepatch-4.14.203-156.332Upgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-livepatch-4.14.193-149.317-debuginfo | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade perfUpgrade python-perf | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docs | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-gke-4.15Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-azure-edgeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1100-azureUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-126-genericUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-oemUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1032-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04 | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub