In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
Each attribute inside a nested IFLA_VF_VLAN_LIST is assumed to be a struct ifla_vf_vlan_info so the size of such attribute needs to be at least of sizeof(struct ifla_vf_vlan_info) which is 14 bytes. The current size validation in do_setvfinfo is against NLA_HDRLEN (4 bytes) which is less than sizeof(struct ifla_vf_vlan_info) so this validation is not enough and a too small attribute might be cast to a struct ifla_vf_vlan_info, this might result in an out of bands read access when accessing the saved (casted) entry in ivvl.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rtUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modules | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.160-104.158Upgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-livepatch-4.14.348-265.562Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.91-99.172Upgrade perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade libperfUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-kvm | Aug 22, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-optional | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeopUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub