A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernelUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headers | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-devel | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade python-perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-develUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azure-devel | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1034-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1127-azureUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-azure-lts-20.04 | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub