In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
nf_osf_find() incorrectly returns true on mismatch, this leads to copying uninitialized memory area in nft_osf which can be used to leak stale kernel stack data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernelUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | Aug 2, 2024 | Apr 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | Apr 28, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-preemptUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-sourceUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-socionext | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-azure-fdeUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-ibm-5.4Upgrade linux-nvidiaUpgrade linux-azureUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-kvmUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-gke | Nov 19, 2024 | Apr 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub