In the Linux kernel, the following vulnerability has been resolved:
netfilter: complete validation of user input
In my recent commit, I missed that do_replace() handlers use copy_from_sockptr() (which I fixed), followed by unsafe copy_from_sockptr_offset() calls.
In all functions, we can perform the @optlen validation before even calling xt_alloc_table_info() with the following check:
if ((u64)optlen < (u64)tmp.size + sizeof(tmp)) return -EINVAL;
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade rvUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug | Nov 4, 2024 | May 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel | May 22, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 20, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 13, 2024 | May 20, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade dtb-alteraUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade kernel-rt_debug-develUpgrade kernel-azure | Jul 10, 2024 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub