An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-64k-devel-matched | Aug 9, 2023 | Jun 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.15.117-72.142Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-5.10.179-168.710 | Jun 30, 2023 | Jun 16, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-50.88Upgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.27-43.48Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headers | Feb 17, 2025 | May 29, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_83_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_83_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfo | Aug 2, 2023 | Jun 16, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Aug 9, 2023 | Jun 16, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 3, 2023 | May 29, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Jun 16, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-modules | Mar 5, 2024 | Jun 16, 2023 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-alUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rt | Jul 5, 2023 | Jun 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1015-allwinnerUpgrade linux-image-5.19.0-1027-gcpUpgrade linux-image-5.4.0-1089-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.1.0-1015-oemUpgrade linux-image-5.4.0-1103-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1020-starfiveUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1025-ibmUpgrade linux-image-6.2.0-1006-azureUpgrade linux-image-5.4.0-1104-oracleUpgrade linux-image-5.19.0-1029-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1006-awsUpgrade linux-image-5.4.0-153-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1033-raspiUpgrade linux-image-5.19.0-46-generic-64kUpgrade linux-image-5.19.0-1022-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.2.0-1007-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-76-genericUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1072-gkeopUpgrade linux-image-5.19.0-1022-raspiUpgrade linux-image-5.4.0-1066-bluefieldUpgrade linux-image-5.15.0-1041-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1007-lowlatency-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1037-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1033-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1033-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-153-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.19.0-46-genericUpgrade linux-image-6.2.0-1007-lowlatencyUpgrade linux-image-5.4.0-1105-awsUpgrade linux-image-6.2.0-1007-raspi-nolpaeUpgrade linux-image-5.4.0-1094-kvmUpgrade linux-image-5.15.0-1039-awsUpgrade linux-image-5.17.0-1034-oemUpgrade linux-image-5.15.0-76-generic-lpaeUpgrade linux-image-5.15.0-1028-nvidia-lowlatencyUpgrade linux-image-6.2.0-1006-oracleUpgrade linux-image-5.15.0-76-generic-64kUpgrade linux-image-5.15.0-1023-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.0.0-1019-oemUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-5.19.0-1028-awsUpgrade linux-image-5.19.0-1026-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.19.0-1028-lowlatency-64kUpgrade linux-image-5.4.0-1025-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1004-ibmUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1028-lowlatencyUpgrade linux-image-5.19.0-1026-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1007-raspiUpgrade linux-image-5.4.0-1052-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1038-oracleUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-24-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-153-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-allwinnerUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-24-generic-64kUpgrade linux-image-5.15.0-76-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.19.0-46-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1037-kvmUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-starfiveUpgrade linux-image-5.4.0-1111-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1108-gcpUpgrade linux-image-5.15.0-1037-gcpUpgrade linux-image-5.15.0-1034-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-24-genericUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-76-lowlatency-64kUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1028-nvidiaUpgrade linux-image-6.2.0-1008-gcp | Jun 30, 2023 | Jun 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub