A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-preempt-optionalUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-extra | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-virtual-hwe-18.04 | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub