Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-rt-debug-core | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.320-242.534Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-devel | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-static | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfo | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-devel | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-core | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-alUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-zteUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-debug-baseUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-zfcpdump-manUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-64kb | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-4.4.0-243-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-azure-fdeUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-snapdragonUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.17.0-1035-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-serverUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-awsUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-4.4.0-1121-aws | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub