In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extra | Nov 7, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.350-266.564Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.162-107.160Upgrade bpftool-debuginfo | Aug 21, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.97-104.177Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 11, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Nov 11, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 6, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernelUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Nov 19, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-vdso | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeop-6.8Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-gke | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub