Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-debug-modules-core | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.184-175.749Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernelUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1 | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfo | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-zfcpdump-manUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade dtb-alUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-zteUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-debug-baseUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rt | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-snapdragonUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-serverUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-dell300xUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1018-iot | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub