A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headers | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade dlm-kmp-64kb | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-25-genericUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1058-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1034-iotUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oracle | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub