In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().
skb_checksum() internally subtracts the length parameter while iterating over skbuff, BUG_ON(len) at the end of it checks that the expected length to be included in the checksum calculation is fully consumed.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-zfcpdumpUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-coreUpgrade kernel-docUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel | Dec 24, 2024 | Nov 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade bpftool | Mar 14, 2025 | Nov 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-devel | Mar 27, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Mar 18, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Feb 11, 2025 | Nov 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Mar 18, 2025 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 12, 2024 | Nov 9, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Feb 10, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-fipsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1086-ibm | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub