A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade kernel-64kb-extraUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-azure | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-awsUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-kvmUpgrade linux-image-generic | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub