A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.145-95.156Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.66-91.160Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-headers | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-tools | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azure-baseUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-apple | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-100-genericUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1058-azureUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1122-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1016-oemUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1015-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-starfive | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub