In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: Fix out of bounds when parsing TCP options
The TCP option parser in synproxy (synproxy_parse_options) could read one byte out of bounds. When the length is 1, the execution flow gets into the loop, reads one byte of the opcode, and if the opcode is neither TCPOPT_EOL nor TCPOPT_NOP, it reads one more byte, which exceeds the length of 1.
This fix is inspired by commit 9609dad263f8 ("ipv4: tcp_input: fix stack out of bounds when parsing TCP options.").
v2 changes:
Added an early return when length < 0 to avoid calling skb_header_pointer with negative length.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfo | Mar 14, 2025 | May 21, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 14, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-syms | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1181-awsUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-4.4.0-268-genericUpgrade linux-image-fipsUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-268-lowlatency | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub