A flaw was found in the Linux kernel's implementation of string matching within a packet. A privileged user (with root or CAP_NET_ADMIN) when inserting iptables rules could insert a rule which can panic the system. Kernel before kernel 5.5-rc1 is affected.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 3, 2021 | Feb 3, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf | May 18, 2021 | Apr 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jun 2, 2021 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 9, 2021 | Oct 22, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-preempt-extraUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-preempt-optionalUpgrade kernel-default-extra | Feb 6, 2021 | Feb 6, 2021 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-awsUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1033-kvm | Feb 26, 2021 | Feb 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub