net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo | May 25, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Mar 29, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 28, 2022 | Aug 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade dtb-amdUpgrade cluster-md-kmp-preemptUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-preempt-optionalUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade dlm-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kselftests-kmp-preemptUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade dtb-zteUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-alUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-devel | Sep 22, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azure-5.8Upgrade linuxUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-riscvUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-azureUpgrade linux-hwe-5.8Upgrade linux-oracleUpgrade linux-oem-5.10 | Nov 19, 2024 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub