Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade rtlaUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-tools | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.184-175.749Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo-common-aarch64 | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux | — | Upgrade kernel | Jul 20, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-devel | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1 | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftool | Jan 10, 2024 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-core | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-kvmsmall-baseUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dtb-amazonUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-vanillaUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-zteUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-kvmsmall-devel | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lts-trustyUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-serverUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-raspiUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04bUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-gkeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-155-generic-lpae | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub