An issue was discovered in the Linux kernel before 5.8. lib/nlattr.c allows attackers to cause a denial of service (unbounded recursion) via a nested Netlink policy with a back reference.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 24, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-vanilla-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dtb-alUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-debug-baseUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-vanillaUpgrade kernel-syms | Aug 9, 2024 | Mar 24, 2023 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1019-iotUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1027-xilinx-zynqmpUpgrade linux-image-5.4.0-156-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1106-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1074-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1096-kvmUpgrade linux-image-5.4.0-1110-gcpUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-156-generic-lpaeUpgrade linux-image-5.4.0-1105-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1113-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1091-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1054-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1107-awsUpgrade linux-image-5.4.0-1068-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-156-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-generic-hwe-18.04 | Aug 14, 2023 | Mar 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub