A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-headersUpgrade libperfUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-modules | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.49-69.116Upgrade bpftoolUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-extra | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-default-extraUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-vanilla-baseUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-alUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanilla | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1028-iotUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-91-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-220-genericUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1051-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04 | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub