CVE-2024-36902
Medium · 5.5CVSS
5.5
EPSS
0.3%
Published
May 30, 2024
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A bug in the Linux kernel can make the whole computer crash when certain network connections are attempted over IPv6.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
NULL pointer dereference in fib6_rule_action() when ip6_dst_idev() returns NULL during IPv6 FIB rule processing, triggered via SCTP connection setup leading to kernel oops and crash.
Why it matters to the business
Unexpected system crashes and reboots on Linux hosts performing IPv6 routing lookups, interrupting services and requiring manual intervention to restore availability.
How an attack unfolds
An attacker with local access crafts an SCTP connect call that forces IPv6 route lookup through fib_rules_lookup, reaching the unchecked ip6_dst_idev() call and dereferencing a NULL pointer to trigger a kernel panic.
How to fix it
Upgrade the Linux kernel to the fixed commit 4a5a573387da6a6b23a4cc62147453ff1bc32afa or later stable releases containing the patch; rebuild and reboot affected systems.
How to confirm the fix worked
Verify kernel source contains the NULL check before ip6_dst_idev() usage in fib6_rules.c; confirm no crash occurs when repeating the SCTP connect reproducer on the patched build.
Typical attack path
- Obtain local unprivileged access on a vulnerable Linux system
- Invoke SCTP socket creation and connect to trigger ip6_dst_lookup_flow
- Force fib6_rule_lookup path that calls fib6_rule_action without valid dst->dev
- Trigger NULL dereference in ip6_dst_idev() causing general protection fault
How to detect it
Search kernel logs and dmesg for Oops messages referencing fib6_rule_action, ip6_dst_idev, and general protection fault at NULL; correlate with SCTP connect syscalls from untrusted processes.
- RIP: 0010:fib6_rule_action+0x241/0x7b0
- KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
- __fib6_rule_action net/ipv6/fib6_rules.c:237
What your security team should do
- Apply the kernel patch immediately on all systems exposing SCTP over IPv6
- Monitor for kernel oops logs containing fib6_rule_action and ip6_dst_idev
- Restrict unprivileged SCTP socket creation via seccomp or capabilities where feasible
- Test patched kernels in staging before broad deployment
The record
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must always be checked. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 31648 Comm: syz-executor.0 Not tainted 6.9.0-rc4-next-20240417-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__fib6_rule_action net/ipv6/fib6_rules.c:237 [inline] RIP: 0010:fib6_rule_action+0x241/0x7b0 net/ipv6/fib6_rules.c:267 Code: 02 00 00 49 8d 9f d8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f9 32 bf f7 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e0 32 bf f7 4c 8b 03 48 89 ef 4c RSP: 0018:ffffc9000fc1f2f0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1a772f98c8186700 RDX: 0000000000000003 RSI: ffffffff8bcac4e0 RDI: ffffffff8c1f9760 RBP: ffff8880673fb980 R08: ffffffff8fac15ef R09: 1ffffffff1f582bd R10: dffffc0000000000 R11: fffffbfff1f582be R12: dffffc0000000000 R13: 0000000000000080 R14: ffff888076509000 R15: ffff88807a029a00 FS: 00007f55e82ca6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31d23000 CR3: 0000000022b66000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> fib_rules_lookup+0x62c/0xdb0 net/core/fib_rules.c:317 fib6_rule_lookup+0x1fd/0x790 net/ipv6/fib6_rules.c:108 ip6_route_output_flags_noref net/ipv6/route.c:2637 [inline] ip6_route_output_flags+0x38e/0x610 net/ipv6/route.c:2649 ip6_route_output include/net/ip6_route.h:93 [inline] ip6_dst_lookup_tail+0x189/0x11a0 net/ipv6/ip6_output.c:1120 ip6_dst_lookup_flow+0xb9/0x180 net/ipv6/ip6_output.c:1250 sctp_v6_get_dst+0x792/0x1e20 net/sctp/ipv6.c:326 sctp_transport_route+0x12c/0x2e0 net/sctp/transport.c:455 sctp_assoc_add_peer+0x614/0x15c0 net/sctp/associola.c:662 sctp_connect_new_asoc+0x31d/0x6c0 net/sctp/socket.c:1099 __sctp_connect+0x66d/0xe30 net/sctp/socket.c:1197 sctp_connect net/sctp/socket.c:4819 [inline] sctp_inet_connect+0x149/0x1f0 net/sctp/socket.c:4834 __sys_connect_file net/socket.c:2048 [inline] __sys_connect+0x2df/0x310 net/socket.c:2065 __do_sys_connect net/socket.c:2075 [inline] __se_sys_connect net/socket.c:2072 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2072 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-abi-stablelists | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-core | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-cross-headers | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-debug | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-debug-core | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-debug-devel | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-debug-modules-extra | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-devel | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-doc | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-headers | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-modules | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-modules-extra | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-rt | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-core | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-core | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-devel | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-devel | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-kvm | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-modules | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-rt-modules-extra | 0 | 4.18.0-553.22.1.rt7.363.el8_10 |
| AlmaLinux:8 | kernel-tools | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-tools-libs-devel | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-core | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | perf | 0 | 4.18.0-553.22.1.el8_10 |
| AlmaLinux:8 | python3-perf | 0 | 4.18.0-553.22.1.el8_10 |
| Debian:10 | linux | 0 | 4.19.316-1 |
| Debian:10 | linux-5.10 | 0 | 5.10.218-1~deb10u1 |
| Debian:11 | linux | 0 | 5.10.218-1 |
| Debian:12 | linux | 0 | 6.1.94-1 |
| Debian:13 | linux | 0 | 6.8.11-1 |
| Linux | Kernel | 2.6.26 | 4.19.314 |
| Mageia:9 | dwarves | 0 | 1.27-1.mga9 |
| Mageia:9 | kernel | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.18-50.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-59.mga9 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-553.22.1.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-553.22.1.rt7.363.el8_10 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
Related vulnerabilities
- CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix… Also affects bpftool
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects bpftool
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects bpftool
- CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore… Also affects bpftool
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects bpftool
- CVE-2025-40154 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel… Also affects bpftool
- CVE-2025-40096 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix… Also affects bpftool
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects bpftool