net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Feb 28, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf | May 25, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade bpftool | Mar 29, 2022 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 28, 2022 | Aug 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade kernel-develUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade gfs2-kmp-preemptUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade kernel-preempt-livepatch-develUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade dtb-alUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-zteUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuild | Sep 22, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-hwe-5.8Upgrade linux-oracleUpgrade linux-oem-5.10Upgrade linux-kvmUpgrade linux-bluefieldUpgrade linuxUpgrade linux-raspiUpgrade linux-awsUpgrade linux-riscvUpgrade linux-azure-5.8Upgrade linux-gcp | Nov 19, 2024 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub