A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-sourceUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-manUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-baseUpgrade kernel-preempt-optionalUpgrade kernel-default-extraUpgrade kernel-zfcpdump | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub