In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.203-156.332Upgrade kernel-livepatch-4.14.192-147.314Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.193-149.317-debuginfoUpgrade kernel-livepatch-4.14.192-147.314-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.193-149.317Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.198-152.320 | Oct 2, 2020 | Sep 9, 2020 |
| Amazon_linux | — | Upgrade kernel | Nov 18, 2020 | Sep 9, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 5, 2021 | Sep 9, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debugUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Nov 3, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Jan 20, 2021 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Nov 2, 2020 | Sep 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade python3-perf | Sep 29, 2020 | Sep 9, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 9, 2020 | Sep 9, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Sep 9, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jan 5, 2021 | Sep 9, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Feb 6, 2021 | Sep 9, 2020 |
| Ubuntu | — | Upgrade linux-image-5.4.0-56-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-4.4.0-197-genericUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-azure-edgeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1088-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1100-azureUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1030-awsUpgrade linux-image-powerpc64-emb-lts-xenial | Dec 2, 2020 | Sep 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub