CVE-2024-36286
Medium · 5.5CVSS
5.5
EPSS
0.3%
Published
Jun 21, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A missing lock in the Linux kernel's network packet handling code can cause crashes on systems that use advanced firewall queue features, but the issue is not known to be actively exploited.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Race Condition
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Missing rcu_read_lock() in instance_destroy_rcu() allows nf_reinject() to be invoked without proper RCU protection, enabling use-after-free or invalid dereference on nfnetlink_queue instance structures during concurrent flush and reinject operations.
Why it matters to the business
Systems relying on netfilter queueing for packet inspection or filtering may experience kernel warnings, instability, or denial-of-service crashes, with limited downstream impact due to only four known dependents and no known active exploitation.
How an attack unfolds
A local attacker triggers a race between nfqnl_flush during instance destruction and concurrent nfqnl_reinject calls; without the RCU lock the kernel logs suspicious RCU usage and may dereference freed memory, though no public exploit code or named threat actor campaigns are associated with this specific flaw.
How to fix it
Upgrade the Linux kernel to a version containing commit 8658bd777cbfcb0c13df23d0ea120e70517761b9 or later; for affected distributions apply the corresponding package update such as ansible 2.7.15-1.mga7 when relevant.
How to confirm the fix worked
Confirm the running kernel contains the fix commit, verify absence of the RCU warning in dmesg under nfqnl_flush and nf_reinject paths, and test queue creation/destruction under load.
Typical attack path
- Obtain local user privileges on a Linux system using nfnetlink_queue
- Create and configure a netfilter queue instance
- Trigger concurrent queue flush and packet reinjection operations
- Exploit the window where rcu_read_lock is absent to induce invalid memory access
How to detect it
Search kernel logs for the exact warning string suspicious rcu_dereference_check usage in nfnetlink_queue.c and stack traces involving nf_reinject or instance_destroy_rcu; no widespread exploitation artifacts are expected.
What your security team should do
- Prioritize kernel updates on any systems exposing nfnetlink_queue to untrusted local users
- Monitor for the RCU usage warning in production kernels
- Apply the fix within normal patch windows given low EPSS and no KEV listing
The record
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that nf_reinject() could be called without rcu_read_lock() : WARNING: suspicious RCU usage 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Not tainted net/netfilter/nfnetlink_queue.c:263 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 2 locks held by syz-executor.4/13427: #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:329 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2190 [inline] #0: ffffffff8e334f60 (rcu_callback){....}-{0:0}, at: rcu_core+0xa86/0x1830 kernel/rcu/tree.c:2471 #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: nfqnl_flush net/netfilter/nfnetlink_queue.c:405 [inline] #1: ffff88801ca92958 (&inst->lock){+.-.}-{2:2}, at: instance_destroy_rcu+0x30/0x220 net/netfilter/nfnetlink_queue.c:172 stack backtrace: CPU: 0 PID: 13427 Comm: syz-executor.4 Not tainted 6.9.0-rc7-syzkaller-02060-g5c1672705a1a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 nf_reinject net/netfilter/nfnetlink_queue.c:323 [inline] nfqnl_reinject+0x6ec/0x1120 net/netfilter/nfnetlink_queue.c:397 nfqnl_flush net/netfilter/nfnetlink_queue.c:410 [inline] instance_destroy_rcu+0x1ae/0x220 net/netfilter/nfnetlink_queue.c:172 rcu_do_batch kernel/rcu/tree.c:2196 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2471 handle_softirqs+0x2d6/0x990 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 </IRQ> <TASK>
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | linux | 0 | 4.19.316-1 |
| Debian:11 | linux | 0 | 5.10.221-1 |
| Debian:12 | linux | 0 | 6.1.94-1 |
| Debian:13 | linux | 0 | 6.9.7-1 |
| Linux | Kernel | 2.6.25 | 4.19.316 |
| Mageia:9 | dwarves | 0 | 1.27-1.mga9 |
| Mageia:9 | kernel | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.18-50.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-59.mga9 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-553.16.1.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| Rocky Linux:8 | kernel | 0 | 0:4.18.0-553.16.1.el8_10 |
| Rocky Linux:8 | kernel | 0 | 0:4.18.0-553.16.1.el8_10.cloud.0.1 |
| Rocky Linux:8 | kernel-rt | 0 | 0:4.18.0-553.16.1.rt7.357.el8_10 |
| SUSE:Linux Enterprise High Availability Extension 12 SP5 | kernel-default | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise High Availability Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Live Patching 12 SP5 | kernel-default | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_60 | 0 | 1-8.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_19 | 0 | 1-150500.11.3.2 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_19 | 0 | 1-150500.11.3.2 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_2 | 0 | 1-150600.1.3.2 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_4 | 0 | 1-150600.13.3.3 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default-base | 0 | 5.14.21-150500.55.80.2.150500.6.35.6 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-rt | 0 | 5.14.21-150500.13.67.3 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-source-rt | 0 | 5.14.21-150500.13.67.3 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | 0 | 5.14.21-150500.55.80.2.150500.6.35.6 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | 0 | 6.4.0-150600.23.22.1.150600.12.8.3 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | 0 | 5.14.21-150500.55.80.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | 0 | 5.14.21-150500.55.80.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | 0 | 5.14.21-150500.33.66.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | 0 | 5.14.21-150500.33.66.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | 0 | 5.14.21-150500.33.66.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | 0 | 6.4.0-150600.8.11.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | 0 | 6.4.0-150600.8.11.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | 0 | 6.4.0-150600.8.11.1 |
| SUSE:Linux Enterprise Real Time 12 SP5 | kernel-rt | 0 | 4.12.14-10.200.1 |
| SUSE:Linux Enterprise Real Time 12 SP5 | kernel-rt_debug | 0 | 4.12.14-10.200.1 |
| SUSE:Linux Enterprise Real Time 12 SP5 | kernel-source-rt | 0 | 4.12.14-10.200.1 |
| SUSE:Linux Enterprise Real Time 12 SP5 | kernel-syms-rt | 0 | 4.12.14-10.200.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-default | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-source | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-source-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-syms | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server 12 SP5 | kernel-syms-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms-azure | 0 | 4.12.14-16.197.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | kernel-docs | 0 | 4.12.14-122.228.2 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | kernel-obs-build | 0 | 4.12.14-122.228.2 |
| SUSE:Linux Enterprise Workstation Extension 12 SP5 | kernel-default | 0 | 4.12.14-122.228.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.80.2 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.22.1 |
| SUSE:Real Time Module 15 SP5 | kernel-rt | 0 | 5.14.21-150500.13.67.3 |
| SUSE:Real Time Module 15 SP5 | kernel-rt_debug | 0 | 5.14.21-150500.13.67.3 |
| SUSE:Real Time Module 15 SP5 | kernel-source-rt | 0 | 5.14.21-150500.13.67.3 |
| SUSE:Real Time Module 15 SP5 | kernel-syms-rt | 0 | 5.14.21-150500.13.67.1 |
| SUSE:Real Time Module 15 SP6 | kernel-rt | 0 | 6.4.0-150600.10.8.3 |
| SUSE:Real Time Module 15 SP6 | kernel-rt_debug | 0 | 6.4.0-150600.10.8.3 |
| SUSE:Real Time Module 15 SP6 | kernel-source-rt | 0 | 6.4.0-150600.10.8.3 |
| SUSE:Real Time Module 15 SP6 | kernel-syms-rt | 0 | 6.4.0-150600.10.8.1 |
| Ubuntu:16.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.0 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-aws-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-azure-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gcp-5.3 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gke-4.15 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gke-5.4 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-gkeop-5.4 | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe | 0 | No fix |
| Ubuntu:18.04:LTS | linux-hwe-edge | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oem | 0 | No fix |
| Ubuntu:18.04:LTS | linux-oracle-5.0 | 0 | No fix |
Related vulnerabilities
- CVE-2023-52340 The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size… Also affects linux
- CVE-2024-39292 In the Linux kernel, the following vulnerability has been resolved: um: Add winch to… Also affects linux
- CVE-2024-38780 In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync… Also affects linux
- CVE-2024-36288 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop… Also affects linux
- CVE-2024-38633 In the Linux kernel, the following vulnerability has been resolved: serial: max3100… Also affects linux
- CVE-2024-38634 In the Linux kernel, the following vulnerability has been resolved: serial: max3100: Lock… Also affects linux
- CVE-2024-38637 In the Linux kernel, the following vulnerability has been resolved: greybus: lights… Also affects linux
- CVE-2024-38659 In the Linux kernel, the following vulnerability has been resolved: enic: Validate length… Also affects linux