In the Linux kernel, the following vulnerability has been resolved:
wireguard: netlink: access device through ctx instead of peer
The previous commit fixed a bug that led to a NULL peer->device being dereferenced. It's actually easier and faster performance-wise to instead get the device from ctx->wg. This semantically makes more sense too, since ctx->wg->peer_allowedips.seq is compared with ctx->allowedips_seq, basing them both in ctx. This also acts as a defence in depth provision against freed peers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-livepatch-5.10.215-203.850Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfo | Aug 14, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-devel | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-amlogic | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub