In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().
skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade kernelUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-develUpgrade python3-perfUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-doc | Dec 24, 2024 | Nov 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.173-118.169Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Mar 14, 2025 | Nov 9, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-tools | Mar 27, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 18, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Mar 18, 2025 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2024 | Nov 9, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 10, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-133-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-133-generic-lpae | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub