Total vulnerabilities in the database
An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 12.0 | 12.0.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 14.04 | 14.04.x |
| canonical / ubuntu_linux | 20.04 | 20.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| canonical / ubuntu_linux | 22.04 | 22.04.x |
| debian / debian_linux | 10.0 | 10.0.x |
| debian / debian_linux | 11.0 | 11.0.x |
| linux / linux_kernel | 6.2 | 6.3.7 |
| linux / linux_kernel | 5.11 | 5.15.116 |
| linux / linux_kernel | 5.5 | 5.10.183 |
| linux / linux_kernel | 4.20 | 5.4.246 |
| linux / linux_kernel | 5.16 | 6.1.33 |
| linux / linux_kernel | 4.19 | 4.19.285 |