CVE-2024-26633
NoneCVSS
—
EPSS
0.3%
Published
Mar 18, 2024
CISA due date
—
Cloudanix analysis
A flaw in how Linux handles certain network packets inside tunnels can cause crashes or leaks of internal data, so systems should be updated promptly to stay stable and secure.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Moderate
- Impact
- Data Exposure
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Uninitialized value access in ip6_tnl_parse_tlv_enc_lim when handling NEXTHDR_FRAGMENT without ensuring sufficient bytes are pulled into skb->head, allowing reads of garbage data during IPv6 tunnel transmission.
Why it matters to the business
Linux systems using IPv6 tunnels risk kernel crashes, information leaks, or instability in network operations, potentially disrupting services and requiring urgent patching across many deployments.
How an attack unfolds
An attacker crafts IPv6 packets containing fragment headers and sends them via raw sockets to trigger ip6_tnl_parse_tlv_enc_lim during tunnel transmission, causing uninitialized memory access that can lead to denial of service or data exposure.
How to fix it
Update the Linux kernel to a version containing commit 135414f300c5db995e2a2f3bf0f455de9d014aee or later; apply vendor-specific backports for affected distributions.
How to confirm the fix worked
Verify kernel source or package version includes the fix commit; test with syzbot-style reproducers or KMSAN to confirm absence of uninit-value reports in ip6_tnl_parse_tlv_enc_lim.
Typical attack path
- Craft malicious IPv6 packet with NEXTHDR_FRAGMENT header
- Send packet through raw IPv6 socket to target system
- Trigger ip6_tnl_start_xmit and ip6_tnl_parse_tlv_enc_lim during transmission
- Cause uninitialized value read due to insufficient pskb_may_pull
How to detect it
Review kernel logs for KMSAN uninit-value warnings in ip6_tnl_parse_tlv_enc_lim or related IPv6 tunnel functions; inspect raw socket usage and packet captures for anomalous fragment headers.
What your security team should do
- Prioritize kernel updates on systems using IPv6 tunnels
- Monitor for kernel panics or KMSAN reports related to ip6_tunnel
- Restrict raw socket access where feasible until patched
The record
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough bytes to skb->head. Currently we might access garbage. [1] BUG: KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc_node_track_caller+0x118/0x3c0 mm/slab_common.c:1027 kmalloc_reserve+0x249/0x4a0 net/core/skbuff.c:582 pskb_expand_head+0x226/0x1a00 net/core/skbuff.c:2098 __pskb_pull_tail+0x13b/0x2310 net/core/skbuff.c:2655 pskb_may_pull_reason include/linux/skbuff.h:2673 [inline] pskb_may_pull include/linux/skbuff.h:2681 [inline] ip6_tnl_parse_tlv_enc_lim+0x901/0xbb0 net/ipv6/ip6_tunnel.c:408 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendms ---truncated---
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 0 | 7.3.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | perf | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-427.13.1.el9_4 |
| AlmaLinux:9 | rv | 0 | 5.14.0-427.13.1.el9_4 |
| Debian:10 | linux | 0 | 4.19.316-1 |
| Debian:10 | linux-5.10 | 0 | 5.10.209-2~deb10u1 |
| Debian:11 | linux | 0 | 5.10.209-1 |
| Debian:12 | linux | 0 | 6.1.76-1 |
| Debian:13 | linux | 0 | 6.6.15-1 |
| Linux | Kernel | 4.10.0 | 4.19.306 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.3.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.3.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.3.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.3.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-427.13.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.13.1.el9_4 |
Related vulnerabilities
- CVE-2024-53197 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-53150 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-2201 A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed… Also affects bpftool
- CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing… Also affects bpftool
- CVE-2024-53113 In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer… Also affects bpftool
- CVE-2024-53104 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip… Also affects bpftool
- CVE-2023-52922 In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in… Also affects bpftool
- CVE-2024-53088 In the Linux kernel, the following vulnerability has been resolved: i40e: fix race… Also affects bpftool