An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-zteUpgrade kernel-preempt-develUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-vanilla-baseUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade dtb-alUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-source-azure | Aug 9, 2024 | Mar 24, 2023 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-156-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1074-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1054-ibmUpgrade linux-image-5.4.0-1113-azureUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1027-xilinx-zynqmpUpgrade linux-image-5.4.0-1091-raspiUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1019-iotUpgrade linux-image-5.4.0-1068-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1107-awsUpgrade linux-image-5.4.0-156-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1105-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-156-lowlatencyUpgrade linux-image-5.4.0-1096-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1110-gcpUpgrade linux-image-5.4.0-1106-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibm-lts-20.04 | Aug 14, 2023 | Mar 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub