A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-64kUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-core | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.128-80.144Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.326-245.539Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-devel | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade dtb-zteUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-vanilla-develUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade dtb-alUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-default-manUpgrade dtb-lgUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-debug-baseUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-freescale | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-virtualUpgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-nvidia-6.2Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1051-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-6.2.0-1018-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-248-genericUpgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-6.2.0-39-genericUpgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-azureUpgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1125-awsUpgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-generic-hwe-16.04 | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub