In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfo | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-preemptUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-devel | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-aws-5.15Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-nvidiaUpgrade linux-aws-5.4Upgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-hwe-5.15Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-azure-fdeUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-azure-5.4 | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub