A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optional | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-laptop-23.10Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-awsUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-175-genericUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-lowlatency | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub