Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matched | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-headers | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1 | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade python-perf | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-devel | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade dtb-alUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-vanillaUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-zfcpdump-manUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-vanilla-baseUpgrade kernel-default-vdsoUpgrade kernel-preempt-develUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade dtb-amd | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1159-awsUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-raspiUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-dell300xUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-serverUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1010-gcp | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub