A flaw was found in the Netfilter subsystem in the Linux kernel. The issue is in the nft_byteorder_eval() function, where the code iterates through a loop and writes to the `dst` array. On each iteration, 8 bytes are written, but `dst` is an array of u32, so each element only has space for 4 bytes. That means every iteration overwrites part of the previous element corrupting this array of u32. This flaw allows a local user to cause a denial of service or potentially break NetFilter functionality.
CVSS Details
- CVSS 3.1 Base Score: 6.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.209-198.812Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Feb 7, 2024 | Jan 18, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.66-91.160Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Feb 17, 2025 | Jan 16, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | May 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | May 31, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Oct 8, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 23, 2024 | Jan 18, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2024 | Jan 16, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 18, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-source-azure | Mar 13, 2024 | Jan 18, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-100-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1016-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-176-generic-lpae | Feb 16, 2024 | Jan 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub