In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules | Nov 7, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.350-266.564Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Aug 21, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernelUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.97-104.177Upgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Nov 11, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Nov 11, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-devel | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04 | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub