A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-4.14.200-155.322 | Oct 28, 2020 | Oct 13, 2020 |
| Amazon_linux | — | Upgrade kernel | Jul 14, 2023 | Oct 13, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 18, 2021 | Oct 13, 2020 |
| Debian | — | Upgrade linux | Oct 21, 2020 | Oct 13, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 20, 2021 | Oct 13, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Feb 3, 2021 | Oct 13, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-sourceUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade bpftool | Nov 3, 2020 | Oct 13, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 3, 2020 | Oct 13, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 18, 2021 | Sep 16, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Mar 18, 2021 | Oct 13, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Dec 11, 2020 | Oct 13, 2020 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1059-oracleUpgrade linux-image-4.15.0-126-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1032-azureUpgrade linux-image-azure-edgeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-197-powerpc64-embUpgrade linux-image-4.15.0-1091-snapdragonUpgrade linux-image-4.15.0-1103-oemUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-126-lowlatencyUpgrade linux-image-5.4.0-1028-kvmUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1082-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-56-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1030-awsUpgrade linux-image-5.4.0-1030-gcpUpgrade linux-image-4.4.0-1142-raspi2Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-126-generic-lpaeUpgrade linux-image-5.4.0-1030-oracleUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-56-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-197-powerpc-e500mcUpgrade linux-image-4.15.0-1088-awsUpgrade linux-image-4.4.0-197-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-197-powerpc-smpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-197-genericUpgrade linux-image-4.4.0-1146-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1074-raspi2Upgrade linux-image-4.15.0-1100-azureUpgrade linux-image-4.4.0-197-lowlatencyUpgrade linux-image-4.4.0-197-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1088-gcpUpgrade linux-image-5.4.0-1023-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-56-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1079-kvmUpgrade linux-image-5.6.0-1053-oemUpgrade linux-image-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1074-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1084-kvmUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenial | Dec 2, 2020 | Oct 13, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 13, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub