In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-docUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade libperfUpgrade kernel-headersUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-devel | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.160-104.158Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernelUpgrade kernel-livepatch-5.10.217-205.860Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.91-99.172Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-devel | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade bpftool-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade python3-perf | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rt | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oemUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-24.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub