In the Linux kernel, the following vulnerability has been resolved:
wireguard: netlink: access device through ctx instead of peer
The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.215-203.850Upgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.156-102.160Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfo | Aug 14, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04d | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub