A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.209-198.812 | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perf | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade perf | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-syms-rt | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-intelUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-awsUpgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-oem-22.04bUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1016-oemUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi2 | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub