A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-docUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvm | May 31, 2024 | Oct 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo | Oct 17, 2023 | Oct 9, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 17, 2023 | Oct 3, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-static | Feb 17, 2025 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jan 15, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade perf | Mar 13, 2024 | Oct 9, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Oct 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 2, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 23, 2024 | Oct 9, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade bpftool | Jun 17, 2024 | Oct 9, 2023 |
| Suse | — | Upgrade dtb-sprdUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-azure-baseUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade dtb-zteUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-alUpgrade kernel-vanilla-baseUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade dtb-amazonUpgrade dtb-armUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-baseUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade gfs2-kmp-rt | Oct 11, 2023 | Oct 9, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-5.4.0-169-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.4.0-1163-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-4.15.0-220-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1100-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-91-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1049-oracleUpgrade linux-image-6.2.0-1013-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1042-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1063-ibmUpgrade linux-image-6.2.0-1018-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1048-gkeUpgrade linux-image-5.15.0-1051-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1035-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1044-raspiUpgrade linux-image-5.15.0-1034-gkeopUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1042-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1053-azureUpgrade linux-image-4.15.0-220-genericUpgrade linux-image-6.2.0-1017-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1018-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-248-lowlatencyUpgrade linux-image-5.4.0-1076-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1147-kvmUpgrade linux-image-5.4.0-1120-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1048-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1046-intel-iotgUpgrade linux-image-4.4.0-248-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1018-azureUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1126-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-91-generic-lpaeUpgrade linux-image-4.15.0-1126-oracleUpgrade linux-image-5.4.0-1116-awsUpgrade linux-image-6.2.0-39-generic-lpaeUpgrade linux-image-5.4.0-1104-kvmUpgrade linux-image-6.2.0-1018-lowlatencyUpgrade linux-image-5.4.0-1121-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1157-gcpUpgrade linux-image-5.4.0-169-genericUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1044-ibmUpgrade linux-image-5.4.0-1083-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1010-starfiveUpgrade linux-image-6.2.0-1020-gcpUpgrade linux-image-5.15.0-91-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-39-genericUpgrade linux-image-6.2.0-1018-kvmUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-1028-iotUpgrade linux-image-5.15.0-1048-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-39-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1053-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-91-genericUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1018-raspiUpgrade linux-image-5.15.0-91-lowlatency-64kUpgrade linux-image-5.4.0-169-generic-lpaeUpgrade linux-image-4.15.0-1163-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1017-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-4.15.0-1172-azureUpgrade linux-image-5.4.0-1115-oracleUpgrade linux-image-4.4.0-1125-aws | Nov 22, 2023 | Oct 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub