In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-headers | Nov 7, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftoolUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.162-107.160Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-4.14.350-266.564 | Aug 21, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.97-104.177Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Nov 11, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Nov 5, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Nov 11, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 6, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade perf | Nov 19, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade dtb-armUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade dtb-amlogicUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-docsUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-docs-html | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.15.0-121-generic | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub