A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-5.10.209-198.812Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.66-91.160 | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-tools | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headers | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-docsUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-default-base | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1016-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-awsUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1127-azureUpgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-100-lowlatency-64k | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub