net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 24, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-devel | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_20_1-debuginfoUpgrade kpatch-patch-4_18_0-348_20_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348_20_1Upgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_12_2 | Apr 27, 2022 | Feb 24, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 1, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 20, 2022 | Feb 24, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade perfUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headers | May 5, 2022 | Feb 24, 2022 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade gfs2-kmp-preemptUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-preempt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-preemptUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade kernel-source-azureUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade dtb-amlogicUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-zteUpgrade kselftests-kmp-preemptUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-alUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-preempt | Oct 26, 2022 | Feb 24, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1068-awsUpgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1017-azureUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-oracleUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-104-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-5.4.0-1072-azureUpgrade linux-image-5.4.0-1036-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-5.13.0-1017-awsUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-azure-fde | Mar 9, 2022 | Feb 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub