In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-64k-core | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-5.15.160-104.158Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfo | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.91-99.172 | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade libperf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-coreUpgrade python3-perf-debuginfoUpgrade rvUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade libperf | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-macros | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-118-lowlatency-64k | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub