net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | May 25, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade perf | Mar 29, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 28, 2022 | Aug 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-preemptUpgrade dtb-broadcomUpgrade dtb-zteUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade ocfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-alUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-preempt-optionalUpgrade kernel-develUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade dlm-kmp-preemptUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kb | Sep 22, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-riscvUpgrade linux-awsUpgrade linux-raspiUpgrade linux-gcpUpgrade linuxUpgrade linux-bluefieldUpgrade linux-azure-5.8Upgrade linux-azureUpgrade linux-hwe-5.8Upgrade linux-kvmUpgrade linux-oem-5.10Upgrade linux-oracle | Nov 19, 2024 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub