In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.73-48.135 | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-fipsUpgrade linux-gkeop-5.15Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-ibmUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-iotUpgrade linux-azure-fdeUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-raspi-5.4 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub