In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernelUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rtUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libs | Nov 7, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.162-107.160Upgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.350-266.564Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Aug 21, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.97-104.177Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Nov 11, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 11, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfo | Nov 19, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdso | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oemUpgrade linux-image-oem-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1066-kvm | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub