An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-core | Nov 14, 2022 | Sep 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.43-20.103Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.281-212.502 | Apr 18, 2023 | Sep 1, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 18, 2023 | Jun 9, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 9, 2022 | Sep 1, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Nov 3, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel | Oct 11, 2022 | Sep 1, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Nov 15, 2022 | Sep 1, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 16, 2022 | Apr 15, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 9, 2022 | Sep 1, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headers | Mar 12, 2024 | Sep 1, 2022 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-preemptUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdump-manUpgrade kernel-azure-baseUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-preemptUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade dtb-alUpgrade dtb-qcomUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-vanilla-develUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade dtb-zteUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-debug-baseUpgrade kselftests-kmp-preempt | Oct 26, 2022 | Sep 1, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1151-aws | Oct 1, 2022 | Aug 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Sep 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub