In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.147-133.644Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dtb-apm | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-aws-5.15Upgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-fipsUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-azure-5.15Upgrade linux-oracle-5.4Upgrade linux-ibm-5.4Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-azure | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub