An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-docUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel | Aug 9, 2023 | Jun 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.179-168.710Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.178-162.673Upgrade bpftoolUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.117-72.142Upgrade python-perf-debuginfo | Jun 30, 2023 | Jun 16, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-livepatch-6.1.29-50.88Upgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.25-37.47Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-livepatch-6.1.27-43.48Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-devel | Feb 17, 2025 | May 29, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_83_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_83_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1 | Aug 2, 2023 | Jun 16, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade python-perf | Jan 10, 2024 | Jun 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Aug 9, 2023 | Jun 16, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 3, 2023 | May 29, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 2, 2023 | Jun 16, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug | Mar 5, 2024 | Jun 16, 2023 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-zteUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-alUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-devel | Jul 5, 2023 | Jun 16, 2023 |
| Ubuntu | — | Upgrade linux-image-allwinnerUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1007-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1108-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-76-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1034-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1028-nvidiaUpgrade linux-image-5.4.0-1025-xilinx-zynqmpUpgrade linux-image-5.19.0-1026-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1038-oracleUpgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-24-generic-lpaeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-1052-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-starfiveUpgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1028-awsUpgrade linux-image-6.2.0-1004-ibmUpgrade linux-image-5.15.0-1037-gcpUpgrade linux-image-6.2.0-24-genericUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.15.0-76-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-24-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.19.0-46-generic-lpaeUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1037-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.19.0-1026-oracleUpgrade linux-image-5.19.0-1028-lowlatency-64kUpgrade linux-image-5.4.0-153-lowlatencyUpgrade linux-image-5.19.0-1028-lowlatencyUpgrade linux-image-5.4.0-1111-azureUpgrade linux-image-6.2.0-1008-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1028-nvidia-lowlatencyUpgrade linux-image-5.15.0-76-generic-64kUpgrade linux-image-5.15.0-1033-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1006-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1033-raspiUpgrade linux-image-6.2.0-1006-azureUpgrade linux-image-virtualUpgrade linux-image-5.19.0-46-generic-64kUpgrade linux-image-5.4.0-1066-bluefieldUpgrade linux-image-5.15.0-1023-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-6.2.0-1007-kvmUpgrade linux-image-6.0.0-1019-oemUpgrade linux-image-6.2.0-1006-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.19.0-1022-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1007-lowlatency-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-1041-azureUpgrade linux-image-5.4.0-1089-raspiUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1094-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1105-awsUpgrade linux-image-5.19.0-1025-ibmUpgrade linux-image-5.19.0-1029-azureUpgrade linux-image-5.17.0-1034-oemUpgrade linux-image-5.15.0-1039-awsUpgrade linux-image-5.19.0-1027-gcpUpgrade linux-image-5.4.0-153-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-153-genericUpgrade linux-image-gke-5.4Upgrade linux-image-6.2.0-1007-raspi-nolpaeUpgrade linux-image-5.4.0-1104-oracleUpgrade linux-image-5.4.0-1103-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1020-starfiveUpgrade linux-image-5.19.0-1022-raspiUpgrade linux-image-6.1.0-1015-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1037-gkeUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1033-raspi-nolpaeUpgrade linux-image-5.15.0-76-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-76-generic-lpaeUpgrade linux-image-6.2.0-1007-lowlatencyUpgrade linux-image-5.19.0-46-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1072-gkeopUpgrade linux-image-5.19.0-1015-allwinnerUpgrade linux-image-aws | Jun 30, 2023 | Jun 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub