In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
- Disallow families other than NFPROTO_{IPV4,IPV6,INET}. - Disallow layer 4 protocol with no ports, since destination port is a mandatory attribute for this object.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-64kUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-modules-core | Nov 4, 2024 | Apr 2, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo | Aug 28, 2024 | Apr 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Apr 2, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jun 26, 2024 | Apr 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | Apr 2, 2024 |
| Oracle_linux | — | Upgrade kernel | May 25, 2024 | Apr 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 30, 2024 | Apr 2, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-armUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdso | May 15, 2024 | Apr 2, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1036-iotUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-ibmUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-azureUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04d | May 17, 2024 | Apr 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub