net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools | May 25, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 29, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 28, 2022 | Aug 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade dtb-zteUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-preempt-livepatch-develUpgrade dtb-caviumUpgrade dtb-amdUpgrade dtb-socionextUpgrade kselftests-kmp-preemptUpgrade dtb-allwinnerUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-preempt-optionalUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-optional | Sep 22, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-awsUpgrade linux-riscvUpgrade linux-gcpUpgrade linuxUpgrade linux-azure-5.8Upgrade linux-oem-5.10Upgrade linux-hwe-5.8Upgrade linux-kvmUpgrade linux-azureUpgrade linux-oracle | Nov 19, 2024 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub