A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-headers | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-rt-livepatchUpgrade dtb-broadcomUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-azure-baseUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade dlm-kmp-azure | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-awsUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-oem-20.04dUpgrade linux-image-laptop-23.10Upgrade linux-image-6.1.0-1033-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-intelUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-175-genericUpgrade linux-image-genericUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub