A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Dec 5, 2023 | Jul 25, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-headersUpgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfo | Feb 17, 2025 | Jul 23, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Jul 25, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Jul 25, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Jul 23, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Jul 25, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-starfiveUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-raspiUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-nvidia-6.2Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-91-generic-64k | Oct 6, 2023 | Jul 25, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 25, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub