An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-64k-debugUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-modules | Sep 26, 2024 | Jan 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-4.14.330-250.540Upgrade kernel-livepatch-4.14.328-248.540Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.205-195.804-debuginfoUpgrade kernel-livepatch-4.14.327-246.539-debuginfoUpgrade kernel-livepatch-5.10.201-191.748Upgrade kernel-livepatch-4.14.334-252.552-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-livepatch-5.10.205-195.807-debuginfoUpgrade kernel-livepatch-4.14.336-255.557Upgrade kernel-develUpgrade kernel-livepatch-4.14.327-246.539Upgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.336-253.554-debuginfoUpgrade kernel-livepatch-5.10.205-195.807Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.336-253.554Upgrade kernel-livepatch-4.14.328-248.540-debuginfoUpgrade kernel-livepatch-4.14.334-252.552Upgrade bpftoolUpgrade kernel-livepatch-4.14.330-250.540-debuginfoUpgrade kernel-tools-debuginfo | Feb 7, 2024 | Jan 12, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Jan 12, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | May 31, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Apr 9, 2024 | Jan 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2024 | Jan 12, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jan 12, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade bpftool-debuginfo | Oct 2, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-docsUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-devel | Feb 15, 2024 | Jan 12, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-170-genericUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1029-iotUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-5.4.0-1117-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.4.0-1122-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-92-genericUpgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-generic | Jan 26, 2024 | Jan 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub