A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-devel | Nov 28, 2023 | Jul 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.128-80.144Upgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-devel | Oct 6, 2023 | Jul 25, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Jul 25, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-devel | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Jul 25, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 12, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Jul 25, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 8, 2023 | Jul 25, 2023 |
| Suse | — | Upgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-vanilla-baseUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-obs-buildUpgrade kernel-ec2-baseUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-debug-baseUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-traceUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-trace-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-xen-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdump-manUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-ec2Upgrade kernel-azure-extraUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-xenUpgrade kernel-trace-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-vanillaUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-vanilla-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-xen-baseUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rt | Sep 15, 2023 | Jul 25, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-88-genericUpgrade linux-image-5.15.0-1040-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-88-generic-64kUpgrade linux-image-5.15.0-1049-awsUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-starfiveUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1060-ibmUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1074-bluefieldUpgrade linux-image-5.15.0-88-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1162-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1042-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-88-lowlatencyUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-5.15.0-1042-ibmUpgrade linux-image-5.15.0-1051-azure-fdeUpgrade linux-image-5.4.0-1025-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1113-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1112-oracleUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.1.0-1023-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.4.0-166-genericUpgrade linux-image-5.15.0-1046-gcpUpgrade linux-image-5.15.0-1046-gkeUpgrade linux-image-5.4.0-1080-gkeopUpgrade linux-image-5.15.0-1032-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1119-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-5.4.0-1097-raspiUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-36-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-88-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1102-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-5.4.0-166-lowlatencyUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-5.15.0-1045-intel-iotgUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-166-generic-lpaeUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.4.0-1033-xilinx-zynqmpUpgrade linux-image-5.15.0-1046-kvmUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1117-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1051-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.15.0-1040-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-5.15.0-1047-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lts-xenial | Oct 6, 2023 | Jul 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub