A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-tools | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-5.15.133-86.144Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.326-245.539 | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.55-75.123Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel | Feb 12, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 6, 2023 | Sep 29, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-devel | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-xen-baseUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-zfcpdump-manUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade kernel-ec2-baseUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-trace-baseUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-xen-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-vanillaUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-xenUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-baseUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade kernel-ec2Upgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-debug-baseUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-traceUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-broadcom | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-220-genericUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-nvidia-6.2Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1028-iotUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-248-genericUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1172-azureUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-6.2.0-1017-aws | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub