A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.15.145-95.156Upgrade bpftoolUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perf | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-default-manUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-azure | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-oemUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1016-oemUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1034-iot | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub