A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules | Nov 28, 2023 | Jul 25, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.128-80.144Upgrade python-perfUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernelUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf | Oct 6, 2023 | Jul 25, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Jul 25, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Jul 25, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Feb 12, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 25, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Jul 25, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Jul 25, 2023 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-xen-develUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-optionalUpgrade kernel-ec2Upgrade kernel-debug-develUpgrade kernel-trace-develUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-xenUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-vanillaUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kernel-preemptUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-traceUpgrade dtb-lgUpgrade kernel-kvmsmall-baseUpgrade kernel-ec2-baseUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-debug-baseUpgrade kernel-rt-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-zte | Sep 15, 2023 | Jul 25, 2023 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1117-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-5.15.0-88-generic-lpaeUpgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1045-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1033-xilinx-zynqmpUpgrade linux-image-5.4.0-1097-raspiUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1046-kvmUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-166-lowlatencyUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-5.4.0-1102-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-5.4.0-1119-azureUpgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1051-azureUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-5.15.0-1040-nvidia-lowlatencyUpgrade linux-image-5.15.0-1047-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1015-awsUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-166-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-88-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1060-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1051-azure-fdeUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-88-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-5.4.0-1074-bluefieldUpgrade linux-image-5.4.0-1080-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1040-nvidiaUpgrade linux-image-5.15.0-88-genericUpgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1032-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1042-raspiUpgrade linux-image-5.4.0-1112-oracleUpgrade linux-image-5.15.0-1046-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-5.4.0-1113-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-5.4.0-1025-iotUpgrade linux-image-oemUpgrade linux-image-5.15.0-1046-gkeUpgrade linux-image-5.15.0-1042-ibmUpgrade linux-image-nvidia-6.2Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-5.15.0-88-lowlatency-64kUpgrade linux-image-5.15.0-1049-awsUpgrade linux-image-5.4.0-166-genericUpgrade linux-image-6.2.0-1016-azure-fde | Oct 6, 2023 | Jul 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub