An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family); While creating a new netfilter table, lack of a safeguard against invalid nf_tables family (pf) values within `nf_tables_newtable` function enables an attacker to achieve out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade perfUpgrade python3-perfUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-develUpgrade kernel-64k | Sep 26, 2024 | Jan 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.334-252.552Upgrade bpftoolUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.328-248.540-debuginfoUpgrade kernel-livepatch-5.10.205-195.807-debuginfoUpgrade kernel-livepatch-5.10.205-195.807Upgrade kernel-livepatch-4.14.327-246.539Upgrade kernel-livepatch-4.14.336-255.557Upgrade kernel-livepatch-4.14.330-250.540-debuginfoUpgrade kernel-livepatch-4.14.336-253.554Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.336-253.554-debuginfoUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernelUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-livepatch-4.14.327-246.539-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.201-191.748Upgrade python-perfUpgrade perfUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.328-248.540Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.334-252.552-debuginfoUpgrade kernel-livepatch-5.10.205-195.804-debuginfoUpgrade kernel-livepatch-4.14.330-250.540 | Feb 7, 2024 | Jan 12, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2024 | Jan 12, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 13, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | May 31, 2024 | Jan 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Apr 9, 2024 | Jan 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2024 | Jan 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jan 12, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-debug | Oct 2, 2024 | Jan 12, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade dlm-kmp-default | Feb 15, 2024 | Jan 12, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1029-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-170-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1084-gkeopUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1101-raspiUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-5.4.0-1077-bluefieldUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-5.4.0-1064-ibmUpgrade linux-image-5.4.0-1105-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-5.4.0-170-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1117-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-5.4.0-1121-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-170-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1116-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-5.4.0-1036-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1122-azureUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1050-oracle | Jan 26, 2024 | Jan 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub