In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-64k-develUpgrade bpftoolUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade rvUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-modules-core | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.160-104.158Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perf | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.91-99.172Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade perfUpgrade libperfUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade rv | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-amazon | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-genericUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1135-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oemUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-1062-nvidia | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub