High · published March 23, 2022
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 4.11, < 4.14.274 | 4.14.274 |
| linux/linux_kernel | ≥ 4.15, < 4.19.237 | 4.19.237 |
| linux/linux_kernel | ≥ 4.20, < 5.4.188 | 5.4.188 |
| linux/linux_kernel | ≥ 5.5, < 5.10.108 | 5.10.108 |
| linux/linux_kernel | ≥ 5.11, < 5.15.29 | 5.15.29 |
| linux/linux_kernel | ≥ 5.16, < 5.16.15 | 5.16.15 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| redhat/virtualization | all versions | — |
| redhat/enterprise_linux | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |