net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 24, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.106-102.504Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headers | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348_20_1-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348_20_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kernelUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_12_2 | Apr 27, 2022 | Feb 24, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 1, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 20, 2022 | Feb 24, 2022 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfo | May 5, 2022 | Feb 24, 2022 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-zfcpdumpUpgrade dlm-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kselftests-kmp-preemptUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-alUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-zteUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-preempt-optionalUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade reiserfs-kmp-preemptUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade gfs2-kmp-preemptUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amdUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-64kb | Oct 26, 2022 | Feb 24, 2022 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-1017-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-104-genericUpgrade linux-image-5.4.0-1068-awsUpgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1072-azureUpgrade linux-image-gke-5.4Upgrade linux-image-azureUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-5.4.0-1036-gkeopUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-oemUpgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-hwe-18.04 | Mar 9, 2022 | Feb 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub