A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-source | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-sourceUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-preempt-optionalUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-devel | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-66-genericUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1038-aws | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub