A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-debug-develUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-kvmUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-4.14.326-245.539Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.128-80.144Upgrade perf | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python3-perf | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-develUpgrade kernel-debug-core | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-zteUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-alUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade kernel-vanilla-baseUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-devel | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1163-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1017-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-169-genericUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-raspiUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1125-awsUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-awsUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-6.2.0-1017-oracle | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub