Updated: 2026-02-26
CWE: CWE-787, CWE-416
Description:
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system. An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS3: 7.8
| OS | Vendor version | Errata |
|---|---|---|
| Ubuntu 18.04 | 4.15.0-206.217 | USN-5920-1 |
| Ubuntu 18.04 AWS | 4.15.0-1151.164 | USN-5920-1 |
| Ubuntu 18.04 HWE Focal | 5.4.0-139.156~18.04.1 | USN-5874-1 |
| RHEL 8 | 4.18.0-513.9.1.el8_9 | RHSA-2023:7549 |
| Debian 10 | 4.19.269-1 | DLA-3245-1 |
| Oracle Linux 8 | 4.18.0-513.9.1.el8_9 | ELSA-2023-7549 |
| Debian 10 cloud | 4.19.269-1 | DLA-3245-1 |
| Ubuntu 20.04 | 5.4.0-139.156 | USN-5853-1 |
| Ubuntu 18.04 AWS Focal | 5.4.0-1096.104~18.04.1 | USN-5874-1 |
| Ubuntu 18.04 Azure Focal | 5.4.0-1103.109~18.04.1 | USN-5853-1 |
| Ubuntu 20.04 AWS | 5.4.0-1096.104 | USN-5853-1 |
| AlmaLinux 8 | 4.18.0-513.9.1.el8_9 | ALSA-2023:7549 |
| Rocky Linux 8 | 4.18.0-513.9.1.el8_9 | RLSA-2023:7549 |
| Ubuntu 16.04 HWE ESM | 4.15.0-206.217~16.04.1 | USN-5883-1 |
| Ubuntu 16.04 GCP ESM | 4.15.0-1146.162~16.04.1 | USN-6007-1 |
| Ubuntu 16.04 AWS HWE ESM | 4.15.0-1151.164~16.04.1 | USN-5919-1 |
| Ubuntu 16.04 Azure ESM | 4.15.0-1162.177~16.04.1 | USN-5975-1 |
| Ubuntu 22.04 | 5.15.0-60.66 | USN-5851-1 |
| Ubuntu 22.04 AWS | 5.15.0-1030.34 | USN-5876-1 |
| Ubuntu 22.04 Azure | 5.15.0-1033.40 | USN-5851-1 |
| RHEL 9 | 5.14.0-362.18.1.el9_3 | RHSA-2024:0461 |
| Oracle Linux 9 | 5.14.0-362.18.1.el9_3 | ELSA-2024-0461 |
| Rocky Linux 9 | 5.14.0-362.18.1.el9_3 | RLSA-2024:0461 |
| AlmaLinux 9 | 5.14.0-362.18.1.el9_3 | ALSA-2024:0461 |
| Amazon Linux 2 5.4 | 5.4.224-128.414.amzn2 | ALAS2KERNEL-5.4-2022-039 |
| Amazon Linux 2 5.10 | 5.10.155-138.670.amzn2 | ALAS2KERNEL-5.10-2022-023 |
| RHEL8 EUS 8.6 | 4.18.0-372.87.1.el8_6 | RHSA-2024:0412 |
| RHEL9 EUS 9.0 | 5.14.0-70.80.1.el9_0 | RHSA-2023:7382 |
| OS | Original kernel version | State |
|---|---|---|
| Ubuntu 18.04 | |
Planned |
| Ubuntu 18.04 AWS | |
Planned |
| Ubuntu 18.04 HWE Focal | |
Will Not Fix |
| RHEL 8 |
4.18.0-147.0.2.el8_1
show all
hide all
4.18.0-147.0.3.el8_1
4.18.0-147.3.1.el8_1
4.18.0-147.5.1.el8_1
4.18.0-147.8.1.el8_1
4.18.0-147.el8
4.18.0-193.1.2.el8_2
4.18.0-193.13.2.el8_2
4.18.0-193.14.3.el8_2
4.18.0-193.19.1.el8_2
4.18.0-193.28.1.el8_2
4.18.0-193.6.3.el8_2
4.18.0-193.el8
4.18.0-240.1.1.el8_3
4.18.0-240.10.1.el8_3
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-240.8.1.el8_3
4.18.0-348.20.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-240.el8
4.18.0-304.el8
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-305.el8
4.18.0-348.12.2.el8_5
4.18.0-348.2.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.el8
4.18.0-372.13.1.el8_6
4.18.0-372.16.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-372.9.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-425.3.1.el8
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-513.5.1.el8_9
4.18.0-80.1.2.el8_0
4.18.0-80.11.1.el8_0
4.18.0-80.11.2.el8_0
4.18.0-80.4.2.el8_0
4.18.0-80.7.1.el8_0
4.18.0-80.7.2.el8_0
4.18.0-80.el8
|
Released |
| Debian 10 | |
Will Not Fix |
| Oracle Linux 8 |
4.18.0-147.0.2.el8_1
show all
hide all
4.18.0-147.0.3.el8_1
4.18.0-147.3.1.el8_1
4.18.0-147.5.1.el8_1
4.18.0-147.8.1.el8_1
4.18.0-147.el8
4.18.0-193.1.2.el8_2
4.18.0-193.13.2.el8_2
4.18.0-193.14.3.el8_2
4.18.0-193.19.1.el8_2
4.18.0-193.28.1.el8_2
4.18.0-193.6.3.el8_2
4.18.0-193.el8
4.18.0-240.1.1.el8_3
4.18.0-240.10.1.el8_3
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-240.8.1.el8_3
4.18.0-240.el8
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-305.el8
4.18.0-348.12.2.el8_5
4.18.0-348.2.1.el8_5
4.18.0-348.20.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.el8
4.18.0-372.13.1.0.1.el8_6
4.18.0-372.16.1.0.1.el8_6
4.18.0-372.19.1.0.1.el8_6
4.18.0-372.26.1.0.1.el8_6
4.18.0-372.32.1.0.1.el8_6
4.18.0-372.9.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-425.3.1.el8
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.0.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-80.1.2.el8_0
4.18.0-80.11.1.el8_0
4.18.0-80.11.2.el8_0
4.18.0-80.4.2.el8_0
4.18.0-80.7.1.el8_0
4.18.0-80.7.2.el8_0
4.18.0-80.el8
4.18.0-513.5.1.el8_9
|
Released |
| CloudLinux OS 8 |
4.18.0-147.0.3.lve.el8
show all
hide all
4.18.0-147.3.1.el8.lve.1
4.18.0-147.8.1.el8.lve.1
4.18.0-147.8.1.el8.lve
4.18.0-193.28.1.lve1.el8
4.18.0-477.27.2.lve.el8
4.18.0-513.5.1.lve.el8
4.18.0-305.10.2.2.lve.el8
4.18.0-305.10.2.lve.el8
4.18.0-305.12.1.lve.el8
4.18.0-305.17.1.lve.el8
4.18.0-305.19.1.lve.el8
4.18.0-305.7.1.lve.el8
4.18.0-305.lve.el8
4.18.0-348.12.2.lve.el8
4.18.0-348.20.1.lve.1.el8
4.18.0-348.20.1.lve.el8
4.18.0-348.23.1.lve.el8
4.18.0-348.7.1.lve.el8
4.18.0-348.lve.el8
4.18.0-372.13.1.lve.el8
4.18.0-372.16.1.lve.el8
4.18.0-372.19.1.lve.el8
4.18.0-372.26.1.lve.1.el8
4.18.0-372.32.1.lve.el8
4.18.0-372.9.1.1.lve.el8
4.18.0-372.9.1.lve.el8
4.18.0-425.10.1.lve.el8
4.18.0-425.13.1.lve.el8
4.18.0-425.19.2.lve.el8
4.18.0-425.3.1.lve.1.el8
4.18.0-425.3.1.lve.2.el8
4.18.0-425.3.1.lve.3.el8
4.18.0-425.3.1.lve.el8
4.18.0-477.10.1.lve.el8
4.18.0-477.13.1.lve.1.el8
4.18.0-477.13.1.lve.el8
4.18.0-477.15.1.lve.2.el8
4.18.0-477.21.1.lve.1.el8
4.18.0-477.21.1.lve.el8
4.18.0-477.27.1.lve.el8
|
Released |
| CloudLinux OS 7h |
4.18.0-147.0.3.el7h.lve
show all
hide all
4.18.0-147.0.3.el7h
4.18.0-147.3.1.el7h.lve.1
4.18.0-147.8.1.el7h.lve.1
4.18.0-147.8.1.el7h.lve
4.18.0-193.28.1.lve1.el7h
4.18.0-305.10.2.2.lve.el7h
4.18.0-305.10.2.lve.el7h
4.18.0-305.12.1.lve.el7h
4.18.0-305.17.1.lve.el7h
4.18.0-305.19.1.lve.el7h
4.18.0-305.7.1.lve.el7h
4.18.0-305.lve.el7h
4.18.0-348.12.2.lve.1.el7h
4.18.0-348.12.2.lve.2.el7h
4.18.0-348.12.2.lve.el7h
4.18.0-348.20.1.lve.1.el7h
4.18.0-348.20.1.lve.el7h
4.18.0-348.23.1.lve.el7h
4.18.0-348.7.1.lve.el7h
4.18.0-348.lve.el7h
4.18.0-372.13.1.lve.el7h
4.18.0-372.16.1.lve.el7h
4.18.0-372.19.1.lve.el7h
4.18.0-372.26.1.lve.1.el7h
4.18.0-372.32.1.lve.el7h
4.18.0-372.9.1.lve.el7h
4.18.0-425.10.1.lve.el7h
4.18.0-425.13.1.lve.el7h
4.18.0-425.19.2.lve.el7h
4.18.0-425.3.1.lve.1.el7h
4.18.0-425.3.1.lve.2.el7h
4.18.0-425.3.1.lve.3.el7h
4.18.0-425.3.1.lve.el7h
4.18.0-477.10.1.lve.1.el7h
4.18.0-477.13.1.lve.1.el7h
4.18.0-477.13.1.lve.el7h
4.18.0-477.15.1.lve.1.el7h
4.18.0-477.15.1.lve.2.el7h
4.18.0-477.21.1.lve.1.el7h
4.18.0-477.21.1.lve.el7h
4.18.0-477.27.1.lve.el7h
4.18.0-477.27.2.lve.el7h
4.18.0-513.5.1.lve.el7h
4.18.0-80.7.2.el7h
|
Released |
| Debian 10 cloud | |
Will Not Fix |
| Ubuntu 20.04 | |
Will Not Fix |
| Ubuntu 18.04 AWS Focal | |
Will Not Fix |
| Ubuntu 18.04 Azure Focal | |
Will Not Fix |
| Ubuntu 20.04 AWS | |
Will Not Fix |
| AlmaLinux 8 |
4.18.0-305.3.1.el8_4
show all
hide all
4.18.0-305.7.1.el8_4
4.18.0-305.el8
4.18.0-348.12.2.el8_5
4.18.0-348.2.1.el8_5
4.18.0-348.20.1.el8.fscrypt
4.18.0-348.20.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-348.el8
4.18.0-372.13.1.el8_6
4.18.0-372.16.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-372.9.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-425.3.1.el8
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-477.27.2.el8_8
4.18.0-513.5.1.el8_9
4.18.0-240.15.1.el8_3
4.18.0-240.22.1.el8_3
4.18.0-240.el8
4.18.0-305.10.2.el8_4
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
|
Released |
| Rocky Linux 8 |
4.18.0-305.10.2.el8_4
show all
hide all
4.18.0-305.12.1.el8_4
4.18.0-305.17.1.el8_4
4.18.0-305.19.1.el8_4
4.18.0-305.25.1.el8_4
4.18.0-305.3.1.el8_4
4.18.0-305.7.1.el8_4
4.18.0-348.12.2.el8_5
4.18.0-348.2.1.el8_5
4.18.0-348.20.1.el8_5
4.18.0-348.23.1.el8_5
4.18.0-348.7.1.el8_5
4.18.0-372.13.1.el8_6
4.18.0-372.16.1.el8_6.0.1
4.18.0-372.16.1.el8_6
4.18.0-372.19.1.el8_6
4.18.0-372.26.1.el8_6
4.18.0-372.32.1.el8_6
4.18.0-372.9.1.el8
4.18.0-425.10.1.el8_7
4.18.0-425.13.1.el8_7
4.18.0-425.19.2.el8_7
4.18.0-425.3.1.el8
4.18.0-477.10.1.el8_8
4.18.0-477.13.1.el8_8
4.18.0-477.15.1.el8_8
4.18.0-477.21.1.el8_8
4.18.0-477.27.1.el8_8
4.18.0-513.5.1.el8_9
|
Released |
| Ubuntu 16.04 HWE ESM | |
Will Not Fix |
| Ubuntu 16.04 GCP ESM | |
Will Not Fix |
| Ubuntu 16.04 AWS HWE ESM | |
Will Not Fix |
| Ubuntu 16.04 Azure ESM | |
Will Not Fix |
| Debian 11 | |
Will Not Fix |
| Ubuntu 22.04 | |
Will Not Fix |
| Ubuntu 22.04 AWS | |
Will Not Fix |
| Ubuntu 22.04 Azure | |
Will Not Fix |
| RHEL 9 |
5.14.0-162.12.1.el9_1
show all
hide all
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-362.13.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-70.13.1.el9_0
5.14.0-70.17.1.el9_0
5.14.0-70.22.1.el9_0
5.14.0-70.26.1.el9_0
5.14.0-70.30.1.el9_0
5.14.0-70.5.1.el9_0
|
Released |
| Oracle Linux 9 |
5.14.0-362.13.0.1.el9_3
show all
hide all
5.14.0-362.13.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-162.12.1.el9_1
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.0.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.0.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-70.13.1.0.3.el9_0
5.14.0-70.17.1.0.1.el9_0
5.14.0-70.22.1.0.1.el9_0
5.14.0-70.26.1.0.1.el9_0
5.14.0-70.30.1.0.1.el9_0
|
Released |
| Rocky Linux 9 |
5.14.0-162.12.1.el9_1.0.1
show all
hide all
5.14.0-162.12.1.el9_1.0.2
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1.0.1
5.14.0-162.6.1.el9_1
5.14.0-362.13.1.el9_3
5.14.0-362.8.1.el9_3
5.14.0-70.22.1.el9_0
5.14.0-70.26.1.el9_0
5.14.0-70.30.1.el9_0
5.14.0-284.30.1.el9_2
5.14.0-284.11.1.el9_2
|
Released |
| AlmaLinux 9 |
5.14.0-362.8.1.el9_3
show all
hide all
5.14.0-70.13.1.el9_0
5.14.0-70.17.1.el9_0
5.14.0-284.18.1.el9_2
5.14.0-284.25.1.el9_2
5.14.0-284.30.1.el9_2
5.14.0-362.13.1.el9_3
5.14.0-70.26.1.el9_0
5.14.0-70.30.1.el9_0
5.14.0-162.12.1.el9_1
5.14.0-162.18.1.el9_1
5.14.0-162.22.2.el9_1
5.14.0-162.23.1.el9_1
5.14.0-162.6.1.el9_1
5.14.0-284.11.1.el9_2
5.14.0-70.22.1.el9_0
|
Released |
| Amazon Linux 2 5.4 | |
Will Not Fix |
| Amazon Linux 2 5.10 | |
Will Not Fix |
| RHEL8 EUS 8.6 |
4.18.0-372.36.1.el8_6
show all
hide all
4.18.0-372.41.1.el8_6
4.18.0-372.46.1.el8_6
4.18.0-372.51.1.el8_6
4.18.0-372.70.1.el8_6
4.18.0-372.57.1.el8_6
4.18.0-372.52.1.el8_6
4.18.0-372.64.1.el8_6
4.18.0-372.75.1.el8_6
4.18.0-372.80.1.el8_6
|
Released |
| RHEL9 EUS 9.0 | |
Planned |