Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-coreUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernelUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headers | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.38-59.109 | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernel-rt | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-baseUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-64kb | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-ibmUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-gkeopUpgrade linux-image-serverUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-raspiUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-intelUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-azureUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04 | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub