A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-docUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-64k-debug-devel-matched | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.355-276.639Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.10.196-185.743Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfo | Jun 11, 2024 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | May 22, 2025 | Oct 9, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftool | Feb 17, 2025 | Aug 30, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Aug 30, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-core | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-ec2Upgrade kernel-vanilla-baseUpgrade kernel-traceUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-trace-develUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-baseUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-xen-develUpgrade cluster-md-kmp-defaultUpgrade kernel-xen-baseUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-vanilla-develUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-vanillaUpgrade kernel-default-develUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade kernel-xenUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade dlm-kmp-rtUpgrade kernel-ec2-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-trace-baseUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-alUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dtb-zteUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-ec2-baseUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-devel | Nov 3, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1051-awsUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-14-lowlatencyUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-6.5.0-1010-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1010-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1172-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-gkeUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-6.1.0-1025-oemUpgrade linux-image-6.5.0-14-lowlatency-64kUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.5.0-1008-raspiUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1007-laptopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-genericUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1125-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1009-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1005-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1013-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1011-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-14-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-6.5.0-14-genericUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-4.15.0-1163-aws | Nov 1, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub