|
Vulnerabilities
< Back

CVE-2023-52628

Updated on 28 Mar 2024

Severity

7.1 High severity

Details

CVSS score
7.1
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nftables: exthdr: fix 4-byte stack OOB write

If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption.

This construct is necessary to clean the remainder of the register in case ->len is NOT a multiple of the register size, so make it conditional just like nft_payload.c does.

The bug was added in 4.1 cycle and then copied/inherited when tcp/sctp and ip option support was added.

Bug reported by Zero Day Initiative project (ZDI-CAN-21950, ZDI-CAN-21951, ZDI-CAN-21961).

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 4.18.0 (+16 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Amazon Linux 1 Released
74 kernels
  • 4.14.101-75.76.amzn1
  • 4.14.104-78.84.amzn1
  • 4.14.106-79.86.amzn1
  • 4.14.109-80.92.amzn1
  • 4.14.114-82.97.amzn1
  • 4.14.114-83.126.amzn1
  • 4.14.121-85.96.amzn1
  • 4.14.123-86.109.amzn1
  • 4.14.128-87.105.amzn1
  • 4.14.133-88.105.amzn1
  • 4.14.133-88.112.amzn1
  • 4.14.138-89.102.amzn1
  • 4.14.143-91.122.amzn1
  • 4.14.146-93.123.amzn1
  • 4.14.152-98.182.amzn1
  • 4.14.154-99.181.amzn1
  • 4.14.165-102.185.amzn1
  • 4.14.165-103.209.amzn1
  • 4.14.171-105.231.amzn1
  • 4.14.173-106.229.amzn1
  • 4.14.177-107.254.amzn1
  • 4.14.181-108.257.amzn1
  • 4.14.186-110.268.amzn1
  • 4.14.193-113.317.amzn1
  • 4.14.200-116.320.amzn1
  • 4.14.203-116.332.amzn1
  • 4.14.209-117.337.amzn1
  • 4.14.214-118.339.amzn1
  • 4.14.219-119.340.amzn1
  • 4.14.225-121.357.amzn1
  • 4.14.225-121.362.amzn1
  • 4.14.232-123.381.amzn1
  • 4.14.238-125.421.amzn1
  • 4.14.238-125.422.amzn1
  • 4.14.248-129.473.amzn1
  • 4.14.252-131.483.amzn1
  • 4.14.262-135.486.amzn1
  • 4.14.262-135.489.amzn1
  • 4.14.268-139.500.amzn1
  • 4.14.273-140.502.amzn1
  • 4.14.275-142.503.amzn1
  • 4.14.281-144.502.amzn1
  • 4.14.285-147.501.amzn1
  • 4.14.287-148.504.amzn1
  • 4.14.294-150.533.amzn1
  • 4.14.299-152.520.amzn1
  • 4.14.305-155.531.amzn1
  • 4.14.309-159.529.amzn1
  • 4.14.311-161.529.amzn1
  • 4.14.313-162.533.amzn1
  • 4.14.314-164.533.amzn1
  • 4.14.314-164.539.amzn1
  • 4.14.318-166.529.amzn1
  • 4.14.318-167.530.amzn1
  • 4.14.320-168.534.amzn1
  • 4.14.320-169.544.amzn1
  • 4.14.322-170.535.amzn1
  • 4.14.322-170.538.amzn1
  • 4.14.326-171.539.amzn1
  • 4.14.328-174.540.amzn1
  • 4.14.330-176.540.amzn1
  • 4.14.334-177.552.amzn1
  • 4.14.336-178.554.amzn1
  • 4.14.336-179.557.amzn1
  • 4.14.336-179.559.amzn1
  • 4.14.336-180.562.amzn1
  • 4.14.336-180.566.amzn1
  • 4.14.62-65.117.amzn1
  • 4.14.70-67.55.amzn1
  • 4.14.72-68.55.amzn1
  • 4.14.77-69.57.amzn1
  • 4.14.77-70.82.amzn1
  • 4.14.94-73.73.amzn1
  • 4.14.97-74.72.amzn1
Amazon Linux 2 Released
109 kernels
  • 4.14.101-91.76.amzn2
  • 4.14.104-95.84.amzn2
  • 4.14.106-97.85.amzn2
  • 4.14.109-99.92.amzn2
  • 4.14.114-103.97.amzn2
  • 4.14.114-105.126.amzn2
  • 4.14.121-109.96.amzn2
  • 4.14.123-111.109.amzn2
  • 4.14.128-112.105.amzn2
  • 4.14.133-113.105.amzn2
  • 4.14.133-113.112.amzn2
  • 4.14.143-118.123.amzn2
  • 4.14.146-119.123.amzn2
  • 4.14.146-120.181.amzn2
  • 4.14.152-124.171.amzn2
  • 4.14.152-127.182.amzn2
  • 4.14.154-128.181.amzn2
  • 4.14.158-129.185.amzn2
  • 4.14.165-131.185.amzn2
  • 4.14.165-133.209.amzn2
  • 4.14.171-136.231.amzn2
  • 4.14.173-137.228.amzn2
  • 4.14.173-137.229.amzn2
  • 4.14.177-139.253.amzn2
  • 4.14.177-139.254.amzn2
  • 4.14.181-140.257.amzn2
  • 4.14.181-142.260.amzn2
  • 4.14.186-146.268.amzn2
  • 4.14.192-147.314.amzn2
  • 4.14.193-149.317.amzn2
  • 4.14.198-152.320.amzn2
  • 4.14.200-155.322.amzn2
  • 4.14.203-156.332.amzn2
  • 4.14.209-160.335.amzn2
  • 4.14.209-160.339.amzn2
  • 4.14.214-160.339.amzn2
  • 4.14.219-161.340.amzn2
  • 4.14.219-164.354.amzn2
  • 4.14.225-168.357.amzn2
  • 4.14.225-169.362.amzn2
  • 4.14.231-173.360.amzn2
  • 4.14.231-173.361.amzn2
  • 4.14.232-176.381.amzn2
  • 4.14.232-177.418.amzn2
  • 4.14.238-182.421.amzn2
  • 4.14.238-182.422.amzn2
  • 4.14.241-184.433.amzn2
  • 4.14.243-185.433.amzn2
  • 4.14.246-187.474.amzn2
  • 4.14.248-189.473.amzn2
  • 4.14.252-195.481.amzn2
  • 4.14.252-195.483.amzn2
  • 4.14.256-197.484.amzn2
  • 4.14.26-54.32.amzn2
  • 4.14.262-200.489.amzn2
  • 4.14.268-205.500.amzn2
  • 4.14.273-207.502.amzn2
  • 4.14.275-207.503.amzn2
  • 4.14.276-211.499.amzn2
  • 4.14.281-212.502.amzn2
  • 4.14.285-215.501.amzn2
  • 4.14.287-215.504.amzn2
  • 4.14.290-217.505.amzn2
  • 4.14.291-218.527.amzn2
  • 4.14.294-220.533.amzn2
  • 4.14.296-222.539.amzn2
  • 4.14.299-223.520.amzn2
  • 4.14.301-224.520.amzn2
  • 4.14.301-225.528.amzn2
  • 4.14.304-226.531.amzn2
  • 4.14.305-227.531.amzn2
  • 4.14.309-231.529.amzn2
  • 4.14.311-233.529.amzn2
  • 4.14.313-235.533.amzn2
  • 4.14.314-237.533.amzn2
  • 4.14.314-238.539.amzn2
  • 4.14.318-240.529.amzn2
  • 4.14.318-241.531.amzn2
  • 4.14.320-242.534.amzn2
  • 4.14.320-243.544.amzn2
  • 4.14.322-244.536.amzn2
  • 4.14.322-244.539.amzn2
  • 4.14.322-246.539.amzn2
  • 4.14.326-245.539.amzn2
  • 4.14.327-246.539.amzn2
  • 4.14.328-248.540.amzn2
  • 4.14.33-59.34.amzn2
  • 4.14.330-250.540.amzn2
  • 4.14.334-252.552.amzn2
  • 4.14.336-253.554.amzn2
  • 4.14.336-255.557.amzn2
  • 4.14.336-256.557.amzn2
  • 4.14.336-256.559.amzn2
  • 4.14.336-257.562.amzn2
  • 4.14.336-257.566.amzn2
  • 4.14.336-257.568.amzn2
  • 4.14.343-259.562.amzn2
  • 4.14.343-260.564.amzn2
  • 4.14.42-61.37.amzn2
  • 4.14.51-66.38.amzn2
  • 4.14.62-70.117.amzn2
  • 4.14.67-71.56.amzn2
  • 4.14.70-72.55.amzn2
  • 4.14.72-73.55.amzn2
  • 4.14.77-80.57.amzn2
  • 4.14.88-88.73.amzn2
  • 4.14.88-88.76.amzn2
  • 4.14.94-89.73.amzn2
  • 4.14.97-90.72.amzn2
Amazon Linux 2023 Will Not Fix —
Amazon Linux 2 5.10 Will Not Fix —
Amazon Linux 2 5.4 Will Not Fix —
CentOS 7 ELS Released
4 kernels
  • 3.10.0-1160.119.1.el7.tuxcare.els4
  • 3.10.0-1160.119.1.el7.tuxcare.els6
  • 3.10.0-1160.119.1.el7.tuxcare.els5
  • 3.10.0-1160.119.1.el7.tuxcare.els3
Debian 10 Released
29 kernels
  • 4.19.118-2+deb10u1
  • 4.19.118-2
  • 4.19.132-1
  • 4.19.146-1
  • 4.19.152-1
  • 4.19.160-2
  • 4.19.171-2
  • 4.19.181-1
  • 4.19.194-1
  • 4.19.194-2
  • 4.19.194-3
  • 4.19.208-1
  • 4.19.232-1
  • 4.19.235-1
  • 4.19.249-2
  • 4.19.260-1
  • 4.19.269-1
  • 4.19.282-1
  • 4.19.289-1
  • 4.19.289-2
  • 4.19.304-1
  • 4.19.37-5+deb10u1
  • 4.19.37-5+deb10u2
  • 4.19.37-5
  • 4.19.67-2+deb10u1
  • 4.19.67-2+deb10u2
  • 4.19.67-2
  • 4.19.98-1+deb10u1
  • 4.19.98-1
Debian 10 cloud Released
22 kernels
  • 4.19.118-2+deb10u1
  • 4.19.118-2
  • 4.19.132-1
  • 4.19.146-1
  • 4.19.152-1
  • 4.19.160-2
  • 4.19.171-2
  • 4.19.181-1
  • 4.19.194-1
  • 4.19.194-2
  • 4.19.194-3
  • 4.19.208-1
  • 4.19.232-1
  • 4.19.235-1
  • 4.19.249-2
  • 4.19.260-1
  • 4.19.269-1
  • 4.19.289-1
  • 4.19.289-2
  • 4.19.304-1
  • 4.19.67-2+deb10u2
  • 4.19.98-1+deb10u1
Oracle Linux 6 UEK 4 Will Not Fix —
Oracle Linux 7 UEK 4 Will Not Fix —
Oracle Linux 7 UEK 6 Released
102 kernels
  • 5.4.17-2011.0.7.el7uek
  • 5.4.17-2011.1.2.el7uek
  • 5.4.17-2011.2.2.el7uek
  • 5.4.17-2011.3.2.1.el7uek
  • 5.4.17-2011.4.4.el7uek
  • 5.4.17-2011.4.6.el7uek
  • 5.4.17-2011.5.3.el7uek
  • 5.4.17-2011.6.2.el7uek
  • 5.4.17-2011.7.4.el7uek
  • 5.4.17-2036.100.6.1.el7uek
  • 5.4.17-2036.101.2.el7uek
  • 5.4.17-2036.102.0.2.el7uek
  • 5.4.17-2036.103.3.1.el7uek
  • 5.4.17-2036.103.3.el7uek
  • 5.4.17-2036.104.4.el7uek
  • 5.4.17-2036.104.5.el7uek
  • 5.4.17-2102.200.13.el7uek
  • 5.4.17-2102.201.3.el7uek
  • 5.4.17-2102.202.5.el7uek
  • 5.4.17-2102.203.5.el7uek
  • 5.4.17-2102.203.6.el7uek
  • 5.4.17-2102.204.4.2.el7uek
  • 5.4.17-2102.204.4.3.el7uek
  • 5.4.17-2102.204.4.4.el7uek
  • 5.4.17-2102.205.7.2.el7uek
  • 5.4.17-2102.205.7.3.el7uek
  • 5.4.17-2102.206.1.el7uek
  • 5.4.17-2136.300.7.el7uek
  • 5.4.17-2136.301.1.2.el7uek
  • 5.4.17-2136.301.1.3.el7uek
  • 5.4.17-2136.301.1.4.el7uek
  • 5.4.17-2136.302.6.1.el7uek
  • 5.4.17-2136.302.7.2.1.el7uek
  • 5.4.17-2136.302.7.2.2.el7uek
  • 5.4.17-2136.302.7.2.3.el7uek
  • 5.4.17-2136.302.7.2.el7uek
  • 5.4.17-2136.304.4.1.el7uek
  • 5.4.17-2136.304.4.2.el7uek
  • 5.4.17-2136.304.4.3.el7uek
  • 5.4.17-2136.304.4.4.el7uek
  • 5.4.17-2136.304.4.5.el7uek
  • 5.4.17-2136.305.5.3.el7uek
  • 5.4.17-2136.305.5.4.el7uek
  • 5.4.17-2136.305.5.5.el7uek
  • 5.4.17-2136.306.1.3.el7uek
  • 5.4.17-2136.307.3.1.el7uek
  • 5.4.17-2136.307.3.2.el7uek
  • 5.4.17-2136.307.3.4.el7uek
  • 5.4.17-2136.307.3.5.el7uek
  • 5.4.17-2136.307.3.6.el7uek
  • 5.4.17-2136.308.7.el7uek
  • 5.4.17-2136.308.9.el7uek
  • 5.4.17-2136.309.4.el7uek
  • 5.4.17-2136.309.5.1.el7uek
  • 5.4.17-2136.309.5.el7uek
  • 5.4.17-2136.310.7.1.el7uek
  • 5.4.17-2136.310.7.el7uek
  • 5.4.17-2136.311.6.1.el7uek
  • 5.4.17-2136.311.6.el7uek
  • 5.4.17-2136.312.3.4.el7uek
  • 5.4.17-2136.313.6.el7uek
  • 5.4.17-2136.314.6.2.el7uek
  • 5.4.17-2136.314.6.3.el7uek
  • 5.4.17-2136.315.5.8.el7uek
  • 5.4.17-2136.315.5.el7uek
  • 5.4.17-2136.316.7.el7uek
  • 5.4.17-2136.317.5.3.el7uek
  • 5.4.17-2136.317.5.5.el7uek
  • 5.4.17-2136.318.7.1.el7uek
  • 5.4.17-2136.318.7.2.el7uek
  • 5.4.17-2136.319.1.2.el7uek
  • 5.4.17-2136.319.1.3.el7uek
  • 5.4.17-2136.319.1.4.el7uek
  • 5.4.17-2136.320.7.1.el7uek
  • 5.4.17-2136.320.7.el7uek
  • 5.4.17-2136.321.4.1.el7uek
  • 5.4.17-2136.321.4.el7uek
  • 5.4.17-2136.322.6.2.el7uek
  • 5.4.17-2136.322.6.3.el7uek
  • 5.4.17-2136.322.6.4.el7uek
  • 5.4.17-2136.322.6.5.el7uek
  • 5.4.17-2136.323.8.1.el7uek
  • 5.4.17-2136.323.8.2.el7uek
  • 5.4.17-2136.323.8.el7uek
  • 5.4.17-2136.324.5.3.el7uek
  • 5.4.17-2136.325.5.1.el7uek
  • 5.4.17-2136.325.5.el7uek
  • 5.4.17-2136.326.6.1.el7uek
  • 5.4.17-2136.326.6.el7uek
  • 5.4.17-2136.327.2.el7uek
  • 5.4.17-2136.328.3.el7uek
  • 5.4.17-2136.329.3.1.el7uek
  • 5.4.17-2136.329.3.2.el7uek
  • 5.4.17-2136.330.7.1.el7uek
  • 5.4.17-2136.330.7.4.el7uek
  • 5.4.17-2136.330.7.5.el7uek
  • 5.4.17-2136.331.7.el7uek
  • 5.4.17-2136.332.5.2.el7uek
  • 5.4.17-2136.333.5.1.el7uek
  • 5.4.17-2136.333.5.el7uek
  • 5.4.17-2136.334.6.1.el7uek
  • 5.4.17-2136.334.6.el7uek
Oracle Linux 8 UEK 6 Released
103 kernels
  • 5.4.17-2136.302.7.2.1.el8uek
  • 5.4.17-2011.0.7.el8uek
  • 5.4.17-2011.1.2.el8uek
  • 5.4.17-2011.2.2.el8uek
  • 5.4.17-2011.3.2.1.el8uek
  • 5.4.17-2011.4.4.el8uek
  • 5.4.17-2011.4.6.el8uek
  • 5.4.17-2011.5.3.el8uek
  • 5.4.17-2011.6.2.el8uek
  • 5.4.17-2011.7.4.el8uek
  • 5.4.17-2036.100.6.1.el8uek
  • 5.4.17-2036.101.2.el8uek
  • 5.4.17-2036.102.0.2.el8uek
  • 5.4.17-2036.103.3.1.el8uek
  • 5.4.17-2036.103.3.el8uek
  • 5.4.17-2036.104.4.el8uek
  • 5.4.17-2036.104.5.el8uek
  • 5.4.17-2102.200.13.el8uek
  • 5.4.17-2102.201.3.el8uek
  • 5.4.17-2102.202.5.el8uek
  • 5.4.17-2102.203.5.el8uek
  • 5.4.17-2102.203.6.el8uek
  • 5.4.17-2102.204.4.2.el8uek
  • 5.4.17-2102.204.4.3.el8uek
  • 5.4.17-2102.204.4.4.el8uek
  • 5.4.17-2102.205.7.2.el8uek
  • 5.4.17-2102.205.7.3.el8uek
  • 5.4.17-2102.206.1.el8uek
  • 5.4.17-2136.300.7.el8uek
  • 5.4.17-2136.301.1.2.el8uek
  • 5.4.17-2136.301.1.3.el8uek
  • 5.4.17-2136.301.1.4.el8uek
  • 5.4.17-2136.302.6.1.el8uek
  • 5.4.17-2136.302.7.2.2.el8uek
  • 5.4.17-2136.302.7.2.3.el8uek
  • 5.4.17-2136.302.7.2.el8uek
  • 5.4.17-2136.304.4.1.el8uek
  • 5.4.17-2136.304.4.2.el8uek
  • 5.4.17-2136.304.4.3.el8uek
  • 5.4.17-2136.304.4.4.el8uek
  • 5.4.17-2136.304.4.5.el8uek
  • 5.4.17-2136.305.5.3.el8uek
  • 5.4.17-2136.305.5.4.el8uek
  • 5.4.17-2136.305.5.5.el8uek
  • 5.4.17-2136.306.1.3.el8uek
  • 5.4.17-2136.307.3.1.el8uek
  • 5.4.17-2136.307.3.2.el8uek
  • 5.4.17-2136.307.3.4.el8uek
  • 5.4.17-2136.307.3.5.el8uek
  • 5.4.17-2136.307.3.6.el8uek
  • 5.4.17-2136.308.7.el8uek
  • 5.4.17-2136.308.9.el8uek
  • 5.4.17-2136.309.4.el8uek
  • 5.4.17-2136.309.5.1.el8uek
  • 5.4.17-2136.309.5.el8uek
  • 5.4.17-2136.310.7.1.el8uek
  • 5.4.17-2136.310.7.el8uek
  • 5.4.17-2136.311.6.1.el8uek
  • 5.4.17-2136.311.6.el8uek
  • 5.4.17-2136.312.3.4.el8uek
  • 5.4.17-2136.313.6.el8uek
  • 5.4.17-2136.314.6.2.el8uek
  • 5.4.17-2136.314.6.3.el8uek
  • 5.4.17-2136.315.5.8.el8uek
  • 5.4.17-2136.315.5.el8uek
  • 5.4.17-2136.316.7.el8uek
  • 5.4.17-2136.317.5.3.el8uek
  • 5.4.17-2136.317.5.5.el8uek
  • 5.4.17-2136.318.7.1.el8uek
  • 5.4.17-2136.318.7.2.el8uek
  • 5.4.17-2136.319.1.2.el8uek
  • 5.4.17-2136.319.1.3.el8uek
  • 5.4.17-2136.319.1.4.el8uek
  • 5.4.17-2136.320.7.1.el8uek
  • 5.4.17-2136.320.7.el8uek
  • 5.4.17-2136.321.4.1.el8uek
  • 5.4.17-2136.321.4.el8uek
  • 5.4.17-2136.322.6.2.el8uek
  • 5.4.17-2136.322.6.3.el8uek
  • 5.4.17-2136.322.6.4.el8uek
  • 5.4.17-2136.322.6.5.el8uek
  • 5.4.17-2136.323.8.1.el8uek
  • 5.4.17-2136.323.8.2.el8uek
  • 5.4.17-2136.323.8.el8uek
  • 5.4.17-2136.324.5.2.el8uek
  • 5.4.17-2136.324.5.3.el8uek
  • 5.4.17-2136.325.5.1.el8uek
  • 5.4.17-2136.325.5.el8uek
  • 5.4.17-2136.326.6.1.el8uek
  • 5.4.17-2136.326.6.el8uek
  • 5.4.17-2136.327.2.el8uek
  • 5.4.17-2136.328.3.el8uek
  • 5.4.17-2136.329.3.1.el8uek
  • 5.4.17-2136.329.3.2.el8uek
  • 5.4.17-2136.330.7.1.el8uek
  • 5.4.17-2136.330.7.4.el8uek
  • 5.4.17-2136.330.7.5.el8uek
  • 5.4.17-2136.331.7.el8uek
  • 5.4.17-2136.332.5.2.el8uek
  • 5.4.17-2136.333.5.1.el8uek
  • 5.4.17-2136.333.5.el8uek
  • 5.4.17-2136.334.6.1.el8uek
  • 5.4.17-2136.334.6.el8uek
RHEL 9 Will Not Fix —
RHEL9 EUS 9.0 Planned —
Ubuntu 16.04 AWS ESM Will Not Fix —
Ubuntu 18.04 Planned —
Ubuntu 20.04 Planned —
Ubuntu 20.04 AWS Planned —
Ubuntu 22.04 Planned —
Ubuntu 22.04 AWS Planned —
Ubuntu 22.04 Azure Planned —