An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-rt-devel | Aug 9, 2023 | Jun 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.117-72.142Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.179-171.711 | Jun 30, 2023 | Jun 16, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.27-43.48Upgrade perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-50.88Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-libbpf-develUpgrade python3-perf | Feb 17, 2025 | May 29, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_83_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_83_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfo | Aug 2, 2023 | Jun 16, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade python3-perf | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Aug 9, 2023 | Jun 16, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 3, 2023 | May 29, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Jun 16, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfo | Mar 5, 2024 | Jun 16, 2023 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-zteUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade dtb-appleUpgrade dtb-mediatek | Jul 5, 2023 | Jun 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1038-oracleUpgrade linux-image-5.19.0-1028-lowlatency-64kUpgrade linux-image-5.19.0-1028-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1026-kvmUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-24-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.2.0-24-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-allwinnerUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.2.0-24-genericUpgrade linux-image-6.2.0-1007-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-76-lowlatency-64kUpgrade linux-image-5.4.0-1108-gcpUpgrade linux-image-5.4.0-153-lowlatencyUpgrade linux-image-5.4.0-1025-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-5.19.0-1026-oracleUpgrade linux-image-5.19.0-1028-awsUpgrade linux-image-6.2.0-1008-gcpUpgrade linux-image-6.2.0-1004-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-osp1Upgrade linux-image-intelUpgrade linux-image-5.4.0-1052-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-46-generic-lpaeUpgrade linux-image-5.15.0-76-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1037-gcpUpgrade linux-image-5.4.0-1111-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1028-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1034-intel-iotgUpgrade linux-image-5.15.0-1037-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-46-generic-64kUpgrade linux-image-5.15.0-1039-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-76-generic-lpaeUpgrade linux-image-5.4.0-1094-kvmUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1025-ibmUpgrade linux-image-5.17.0-1034-oemUpgrade linux-image-5.19.0-1029-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1023-gkeopUpgrade linux-image-6.2.0-1007-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1020-starfiveUpgrade linux-image-6.1.0-1015-oemUpgrade linux-image-5.4.0-1103-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1104-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1006-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1007-raspi-nolpaeUpgrade linux-image-5.4.0-153-genericUpgrade linux-image-5.15.0-76-generic-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.2.0-1007-lowlatency-64kUpgrade linux-image-5.15.0-1041-azureUpgrade linux-image-5.19.0-1022-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-153-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1033-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1006-azureUpgrade linux-image-6.2.0-1006-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.0.0-1019-oemUpgrade linux-image-5.15.0-1033-raspi-nolpaeUpgrade linux-image-5.4.0-1089-raspiUpgrade linux-image-5.4.0-1066-bluefieldUpgrade linux-image-5.4.0-1072-gkeopUpgrade linux-image-5.15.0-1028-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-76-genericUpgrade linux-image-5.15.0-1037-gkeUpgrade linux-image-5.19.0-1027-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1007-lowlatencyUpgrade linux-image-5.19.0-46-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1022-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1105-awsUpgrade linux-image-5.19.0-1015-allwinnerUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1033-ibmUpgrade linux-image-aws | Jun 30, 2023 | Jun 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub