Overview
About vulnerability
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
- Affected packages:
- kernel @ 2.6.32 (+18 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Amazon Linux 1 | Released |
54 kernels
|
| Amazon Linux 2 5.4 | Released |
21 kernels
|
| Oracle Linux 6 UEK 4 | Released |
85 kernels
|
| Oracle Linux 7 UEK 4 | Released |
127 kernels
|
| RHEL8 EUS 8.6 | Released |
13 kernels
|
| RHEL9 EUS 9.0 | Planned | — |
| Ubuntu 14.04 HWE ESM | Will Not Fix | — |
| Ubuntu 16.04 | Released |
10 kernels
|
| Ubuntu 16.04 AWS ESM | Will Not Fix | — |
| Ubuntu 16.04 AWS HWE ESM | Will Not Fix | — |
| Ubuntu 16.04 Azure ESM | Will Not Fix | — |
| Ubuntu 16.04 ESM | Will Not Fix | — |
| Ubuntu 16.04 GCP ESM | Will Not Fix | — |
| Ubuntu 16.04 HWE ESM | Will Not Fix | — |
| Ubuntu 18.04 | Released |
8 kernels
|
| Ubuntu 18.04 AWS | Will Not Fix | — |
| Ubuntu 22.04 Azure | Ready For Release | — |