A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-64k | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfo | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.49-69.116 | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade python3-perf | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernelUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64 | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade dtb-zteUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-alUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-baseUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisilicon | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-starfiveUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-4.15.0-1172-azureUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1116-awsUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1121-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1010-starfive | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub