A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 3.2 | Low | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N |
| Product | Vendor | Version |
|---|---|---|
| Red Hat Enterprise Linux 9 | Red Hat | < 04fb2baa0b147f51db065a1b13a11954abe592d0 |
| Red Hat Enterprise Linux 8 | Red Hat | n/a |
| Red Hat Enterprise Linux 9 | Red Hat | <= 25.1.0 |
| Red Hat Enterprise Linux 6 | Red Hat | < 10.0.19041.1348 |
| Red Hat Enterprise Linux 7 | Red Hat | < 93a6e920d8ccb4df846c03b6e72f7e08843d294c |
| Red Hat Enterprise Linux 8 | Red Hat | < 2.5.0 |
| Red Hat Enterprise Linux 9 | Red Hat | APQ8053, MDM9205, MDM9206, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, SDM450, SM8150 |