CVE-2021-47572
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
May 24, 2024
CISA due date
—
Cloudanix analysis
A flaw in the Linux kernel lets a logged-in user crash the whole machine simply by trying to add certain network routes on systems that do not have IPv6 support turned on.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Null pointer dereference in nh_create_ipv6 error path when CONFIG_IPV6 is disabled, caused by erroneous call to ipv6_stub->fib6_nh_release, resulting in kernel crash via supervisor instruction fetch on NULL address.
Why it matters to the business
Local denial-of-service on Linux systems without IPv6 enabled; 878 days since publication increases exposure window despite stable low EPSS, affecting any downstream kernel dependents in servers, appliances, and embedded devices.
How an attack unfolds
Local attacker invokes rtm_new_nexthop via netlink to add an IPv6 gateway; the call reaches nh_create_ipv6 which hits its error path and dereferences the missing stub, producing an oops. No remote vector or privilege escalation is present.
How to fix it
Apply the upstream fix that returns -EAFNOSUPPORT directly from nh_create_ipv6 without invoking the release stub; rebuild and deploy updated kernel packages. No fixed versions listed; backport commit 1aefd3de7bc6 logic to all maintained branches.
How to confirm the fix worked
Confirm patched kernel source contains the direct return of dummy stub error; attempt IPv6 nexthop creation on a !CONFIG_IPV6 build and verify no NULL dereference occurs. Reproduce the original oops trace to validate exposure before patching.
Typical attack path
- Obtain local shell or process execution on target Linux host
- Issue netlink RTM_NEWNEXTHOP message requesting IPv6 nexthop
- Kernel enters nh_create_ipv6 error path when IPv6 is disabled
- ipv6_stub->fib6_nh_release dereferences NULL, triggering oops and potential panic
How to detect it
Search kernel logs and dmesg for NULL pointer dereference oops mentioning nh_create_ipv6 or rtm_new_nexthop; correlate with netlink activity from untrusted local processes around the time of any unexpected reboots or panics.
- nh_create_ipv6+0xed/0x10c
- BUG: kernel NULL pointer dereference, address: 0000000000000000
- rtm_new_nexthop+0x6d7/0x13f3
- ipv6_stub->fib6_nh_release
What your security team should do
- Immediately inventory all Linux kernels lacking CONFIG_IPV6 and schedule updates
- Add kernel oops monitoring for nh_create_ipv6 and rtm_new_nexthop symbols
- Restrict unprivileged netlink access via SELinux or capabilities where feasible
- Test patched kernels in staging before broad rollout given long disclosure window
The record
In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled (!CONFIG_IPV6) we'll hit a NULL pointer dereference[1] in the error path of nh_create_ipv6() due to calling ipv6_stub->fib6_nh_release. The bug has been present since the beginning of IPv6 nexthop gateway support. Commit 1aefd3de7bc6 ("ipv6: Add fib6_nh_init and release to stubs") tells us that only fib6_nh_init has a dummy stub because fib6_nh_release should not be called if fib6_nh_init returns an error, but the commit below added a call to ipv6_stub->fib6_nh_release in its error path. To fix it return the dummy stub's -EAFNOSUPPORT error directly without calling ipv6_stub->fib6_nh_release in nh_create_ipv6()'s error path. [1] Output is a bit truncated, but it clearly shows the error. BUG: kernel NULL pointer dereference, address: 000000000000000000 #PF: supervisor instruction fetch in kernel modede #PF: error_code(0x0010) - not-present pagege PGD 0 P4D 0 Oops: 0010 [#1] PREEMPT SMP NOPTI CPU: 4 PID: 638 Comm: ip Kdump: loaded Not tainted 5.16.0-rc1+ #446 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014 RIP: 0010:0x0 Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. RSP: 0018:ffff888109f5b8f0 EFLAGS: 00010286^Ac RAX: 0000000000000000 RBX: ffff888109f5ba28 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881008a2860 RBP: ffff888109f5b9d8 R08: 0000000000000000 R09: 0000000000000000 R10: ffff888109f5b978 R11: ffff888109f5b948 R12: 00000000ffffff9f R13: ffff8881008a2a80 R14: ffff8881008a2860 R15: ffff8881008a2840 FS: 00007f98de70f100(0000) GS:ffff88822bf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffd6 CR3: 0000000100efc000 CR4: 00000000000006e0 Call Trace: <TASK> nh_create_ipv6+0xed/0x10c rtm_new_nexthop+0x6d7/0x13f3 ? check_preemption_disabled+0x3d/0xf2 ? lock_is_held_type+0xbe/0xfd rtnetlink_rcv_msg+0x23f/0x26a ? check_preemption_disabled+0x3d/0xf2 ? rtnl_calcit.isra.0+0x147/0x147 netlink_rcv_skb+0x61/0xb2 netlink_unicast+0x100/0x187 netlink_sendmsg+0x37f/0x3a0 ? netlink_unicast+0x187/0x187 sock_sendmsg_nosec+0x67/0x9b ____sys_sendmsg+0x19d/0x1f9 ? copy_msghdr_from_user+0x4c/0x5e ? rcu_read_lock_any_held+0x2a/0x78 ___sys_sendmsg+0x6c/0x8c ? asm_sysvec_apic_timer_interrupt+0x12/0x20 ? lockdep_hardirqs_on+0xd9/0x102 ? sockfd_lookup_light+0x69/0x99 __sys_sendmsg+0x50/0x6e do_syscall_64+0xcb/0xf2 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f98dea28914 Code: 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 48 8d 05 e9 5d 0c 00 8b 00 85 c0 75 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 41 54 41 89 d4 55 48 89 f5 53 RSP: 002b:00007fff859f5e68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e2e RAX: ffffffffffffffda RBX: 00000000619cb810 RCX: 00007f98dea28914 RDX: 0000000000000000 RSI: 00007fff859f5ed0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000008 R10: fffffffffffffce6 R11: 0000000000000246 R12: 0000000000000001 R13: 000055c0097ae520 R14: 000055c0097957fd R15: 00007fff859f63a0 </TASK> Modules linked in: bridge stp llc bonding virtio_net
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | 5.10.84-1 |
| Debian:12 | linux | 0 | 5.15.15-1 |
| Debian:13 | linux | 0 | 5.15.15-1 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-doc | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-headers | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-tools | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-tools-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-tools-libs | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-tools-libs-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-core | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-devel | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-modules | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | python3-perf | 0 | 0:5.14.0-162.6.1.el9_1 |
| Red Hat:enterprise_linux:9::crb | python3-perf-debuginfo | 0 | 0:5.14.0-162.6.1.el9_1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_17 | 0 | 1-150500.11.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_17 | 0 | 1-150500.11.3.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default-base | 0 | 5.14.21-150500.55.73.1.150500.6.33.8 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-rt | 0 | 5.14.21-150500.13.61.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-source-rt | 0 | 5.14.21-150500.13.61.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | 0 | 5.14.21-150500.55.73.1.150500.6.33.8 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | 0 | 5.14.21-150500.55.73.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | 0 | 5.14.21-150500.33.60.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | 0 | 5.14.21-150500.33.60.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | 0 | 5.14.21-150500.33.60.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Real Time Module 15 SP5 | kernel-rt | 0 | 5.14.21-150500.13.61.1 |
| SUSE:Real Time Module 15 SP5 | kernel-rt_debug | 0 | 5.14.21-150500.13.61.1 |
| SUSE:Real Time Module 15 SP5 | kernel-source-rt | 0 | 5.14.21-150500.13.61.1 |
| SUSE:Real Time Module 15 SP5 | kernel-syms-rt | 0 | 5.14.21-150500.13.61.1 |
| Ubuntu:14.04:LTS | linux | 0 | 3.11.0-12.19 |
| Ubuntu:14.04:LTS | linux-aws | 0 | 4.4.0-1002.2 |
| Ubuntu:14.04:LTS | linux-azure | 0 | 4.15.0-1023.24~14.04.1 |
| Ubuntu:14.04:LTS | linux-lts-xenial | 0 | 4.4.0-13.29~14.04.1 |
| Ubuntu:16.04:LTS | linux | 0 | 4.4.0-2.16 |
| Ubuntu:16.04:LTS | linux-aws | 0 | 4.4.0-1001.10 |
| Ubuntu:16.04:LTS | linux-aws-hwe | 0 | 4.15.0-1030.31~16.04.1 |
| Ubuntu:16.04:LTS | linux-azure | 0 | 4.11.0-1009.9 |
| Ubuntu:16.04:LTS | linux-gcp | 0 | 4.10.0-1004.4 |
| Ubuntu:16.04:LTS | linux-hwe | 0 | 4.8.0-39.42~16.04.1 |
| Ubuntu:16.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:16.04:LTS | linux-kvm | 0 | 4.4.0-1004.9 |
| Ubuntu:16.04:LTS | linux-oracle | 0 | 4.15.0-1007.9~16.04.1 |
| Ubuntu:18.04:LTS | linux | 0 | 4.13.0-16.19 |
| Ubuntu:18.04:LTS | linux-aws | 0 | 4.15.0-1001.1 |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.4 | 0 | 5.4.0-1066.69~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-4.15 | 0 | 4.15.0-1082.92 |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-5.4 | 0 | 5.4.0-1070.73~18.04.1 |
| Ubuntu:18.04:LTS | linux-azure-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp-4.15 | 0 | 4.15.0-1071.81 |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp-5.4 | 0 | 5.4.0-1065.69~18.04.1 |
| Ubuntu:18.04:LTS | linux-gke-4.15 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gke-5.4 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gkeop-5.4 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe-5.4 | 0 | 5.4.0-100.113~18.04.1 |
| Ubuntu:18.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-ibm-5.4 | 0 | 5.4.0-1015.16~18.04.1 |
| Ubuntu:18.04:LTS | linux-kvm | 0 | 4.15.0-1002.2 |
| Ubuntu:18.04:LTS | linux-oem | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oracle | 0 | 4.15.0-1007.9 |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oracle-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oracle-5.4 | 0 | 5.4.0-1064.68~18.04.1 |
| Ubuntu:18.04:LTS | linux-raspi-5.4 | 0 | 5.4.0-1053.60~18.04.1 |
| Ubuntu:20.04:LTS | linux | 0 | No fix |
| Ubuntu:20.04:LTS | linux | 0 | 5.4.0-100.113 |
| Ubuntu:20.04:LTS | linux-aws | 0 | No fix |
| Ubuntu:20.04:LTS | linux-aws | 0 | 5.4.0-1066.69 |
| Ubuntu:20.04:LTS | linux-aws-5.11 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-aws-5.13 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-aws-5.15 | 0 | 5.15.0-1014.18~20.04.1 |
| Ubuntu:20.04:LTS | linux-aws-5.8 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-azure | 0 | No fix |
| Ubuntu:20.04:LTS | linux-azure | 0 | 5.4.0-1070.73 |
| Ubuntu:20.04:LTS | linux-azure-5.11 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-azure-5.13 | 0 | No fix |
| Ubuntu:20.04:LTS | linux-azure-5.15 | 0 | 5.15.0-1007.8~20.04.1 |
Related vulnerabilities
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21760 In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU… Also affects linux
- CVE-2025-21758 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU… Also affects linux
- CVE-2025-21664 In the Linux kernel, the following vulnerability has been resolved: dm thin: make… Also affects linux
- CVE-2024-57946 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't… Also affects linux
- CVE-2024-57945 In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the… Also affects linux