A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-coreUpgrade rvUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modules-coreUpgrade kernel-64k | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade python-perfUpgrade kernel-livepatch-4.14.326-245.539 | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headers | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade dtb-alUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-vanilla-baseUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-zteUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-vanilla-develUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-vanillaUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-debug-base | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1121-azureUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-gke-5.15Upgrade linux-image-starfiveUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-kvmUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-awsUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04 | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub