A flaw was found in the Netfilter subsystem in the Linux kernel. The nfnl_osf_add_callback function did not validate the user mode controlled opt_num field. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, leading to a crash or information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 5.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matched | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernelUpgrade kernel-livepatch-4.14.355-276.639Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.196-185.743Upgrade perfUpgrade perf-debuginfo | Jun 11, 2024 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | May 22, 2025 | Oct 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-devel | Feb 17, 2025 | Aug 30, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Aug 30, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-devel | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-xen-develUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-xenUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-vanillaUpgrade dtb-amdUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-trace-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-traceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-ec2Upgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade kernel-vanilla-develUpgrade kernel-xen-baseUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-ec2-baseUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-trace-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-alUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-ec2-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade dtb-zteUpgrade kernel-devel-rtUpgrade kernel-rt | Nov 3, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-6.5.0-14-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1011-awsUpgrade linux-image-intel-iotgUpgrade linux-image-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-14-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1007-laptopUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-1013-oracleUpgrade linux-image-azureUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-1005-starfiveUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-laptop-23.10Upgrade linux-image-4.4.0-1125-awsUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1009-oemUpgrade linux-image-genericUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1010-azureUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-6.5.0-1010-azure-fdeUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-6.5.0-1010-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-awsUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-6.5.0-14-lowlatencyUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-6.5.0-14-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.5.0-1008-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1051-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1053-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-xilinx-zynqmp | Nov 1, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub