net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | May 25, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python-perf | Mar 29, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 28, 2022 | Aug 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-preemptUpgrade dtb-alteraUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-zteUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-alUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-preemptUpgrade dtb-amdUpgrade kernel-docsUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-hisiliconUpgrade kernel-preempt-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-preemptUpgrade kernel-azureUpgrade dtb-socionextUpgrade kselftests-kmp-preemptUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-marvell | Sep 22, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-riscvUpgrade linux-awsUpgrade linux-azure-5.8Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linuxUpgrade linux-hwe-5.8Upgrade linux-azureUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-oem-5.10 | Nov 19, 2024 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub