net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 24, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.106-102.504Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf | Jul 4, 2022 | Feb 24, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-devel | Feb 17, 2025 | Feb 22, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348_20_1Upgrade kpatch-patch-4_18_0-348_12_2Upgrade kpatch-patch-4_18_0-348_12_2-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-348_20_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_12_2-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348-debugsource | Apr 27, 2022 | Feb 24, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 1, 2022 | Feb 22, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 20, 2022 | Feb 24, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-headersUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-modules-extra | May 5, 2022 | Feb 24, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-preemptUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade dtb-zteUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade dtb-alteraUpgrade dlm-kmp-preemptUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade cluster-md-kmp-preemptUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-preempt-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-preemptUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade gfs2-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-docs-html | Oct 26, 2022 | Feb 24, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1021-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-104-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1072-azure-fdeUpgrade linux-image-5.4.0-1017-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1068-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-104-generic-lpaeUpgrade linux-image-5.13.0-1020-raspiUpgrade linux-image-5.4.0-104-genericUpgrade linux-image-5.13.0-35-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1017-azureUpgrade linux-image-gkeopUpgrade linux-image-5.13.0-35-genericUpgrade linux-image-5.14.0-1027-oemUpgrade linux-image-5.4.0-1065-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1055-raspiUpgrade linux-image-bluefieldUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-35-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1072-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1030-bluefieldUpgrade linux-image-5.4.0-1066-oracleUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1020-raspi-nolpaeUpgrade linux-image-5.13.0-35-generic-64kUpgrade linux-image-5.13.0-1016-kvmUpgrade linux-image-5.4.0-1058-kvmUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1017-awsUpgrade linux-image-5.13.0-1019-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1067-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1036-gkeop | Mar 9, 2022 | Feb 24, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 22, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub