A flaw was found in the Netfilter subsystem in the Linux kernel. The xt_u32 module did not validate the fields in the xt_u32 structure. This flaw allows a local privileged attacker to trigger an out-of-bounds read by setting the size fields with a value beyond the array boundaries, leading to a crash or information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-core | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.15.133-86.144Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-5.10.196-185.743Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfo | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perf | Feb 12, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libs | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 6, 2023 | Sep 29, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-core | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-azureUpgrade kernel-xen-baseUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-zfcpdump-manUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-trace-develUpgrade dtb-appleUpgrade kernel-xenUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade dtb-marvellUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-ec2-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-vanilla-develUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade kernel-debug-baseUpgrade kernel-source-azureUpgrade kernel-ec2Upgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-traceUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-zteUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-azure-devel | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-intelUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-ibmUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04 | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub