A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-sourceUpgrade python-perf | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-preempt-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-default-livepatchUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-preempt-optionalUpgrade kernel-default-extraUpgrade kernel-64kb-optional | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-lpae | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub