Skip to content
OpenAdvisories

Description

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

Affected products

VendorProductAffectedFixed
Linux Kernel kernel 5.5 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.4.6-1 —
Debian 13 linux 5.4.6-1 —
Debian 12 linux 5.4.6-1 —
Debian 8 linux 3.16.84-1 DLA-2241-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-gke +1 No fix yet —
Ubuntu 18.04 LTS linux 4.15.0-106.107 USN-4390-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1073.77 USN-4390-1
Ubuntu 18.04 LTS linux-azure-4.15 4.15.0-1089.99 USN-4390-1
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1013.14~18.04.1 —
Ubuntu 18.04 LTS linux-gcp +6 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1077.87 —
Ubuntu 18.04 LTS linux-gcp-5.3 +1 5.3.0-1012.13~18.04.1 —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1063.66 USN-4390-1
Ubuntu 18.04 LTS linux-gke-5.0 5.0.0-1042.43 USN-4388-1
Ubuntu 18.04 LTS linux-hwe 5.3.0-40.32~18.04.1 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1067.68 USN-4390-1
Ubuntu 18.04 LTS linux-oem 4.15.0-1087.97 USN-4390-1
Ubuntu 18.04 LTS linux-oem-osp1 5.0.0-1059.64 USN-4388-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1045.49 USN-4390-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1063.67 USN-4390-1
Ubuntu 18.04 LTS linux-raspi2-5.3 5.3.0-1018.20~18.04.1 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1080.87 USN-4390-1
Ubuntu 16.04 LTS linux 4.4.0-184.214 USN-4391-1
Ubuntu 16.04 LTS linux-aws 4.4.0-1109.120 USN-4391-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1073.77~16.04.1 USN-4390-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1089.99~16.04.1 USN-4390-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1077.87~16.04.1 USN-4390-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-106.107~16.04.1 USN-4390-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-kvm 4.4.0-1075.82 USN-4391-1
Ubuntu 16.04 LTS linux-oracle 4.15.0-1045.49~16.04.1 USN-4390-1
Ubuntu 16.04 LTS linux-raspi2 4.4.0-1134.143 USN-4391-1
Ubuntu 16.04 LTS linux-snapdragon 4.4.0-1138.146 USN-4391-1
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2018.18 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1034.39 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1041.46 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1073.77 USN-4391-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1089.99~14.04.1 USN-4390-1
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-184.214~14.04.1 USN-4391-1
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-193.rt13.51.el8 RHSA-2020:1567
RHEL 8 perf +26 4.18.0-193.el8 RHSA-2020:1769
RHEL 7 kernel-alt 4.14.0-115.35.1.el7a RHSA-2021:0354
RHEL 7 kernel-rt +10 3.10.0-1160.rt56.1131.el7 RHSA-2020:4062
RHEL 7 perf +18 3.10.0-1160.el7 RHSA-2021:0354, RHSA-2020:4060
ReleasePackageFixed inAdvisory
SLES 15 SP1 kernel-azure +2 4.12.14-8.41.1 SUSE-SU-2020:2541-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.56.1 SUSE-SU-2020:2575-1
SLES 15 kernel-docs +6 4.12.14-150.58.1 SUSE-SU-2020:2610-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.25.1 SUSE-SU-2020:2540-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.37.1 SUSE-SU-2020:2574-1
SLES 12 SP4 kernel-syms +2 4.12.14-95.60.1 SUSE-SU-2020:2623-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.144.1 SUSE-SU-2021:1623-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_24 +2 8-2.1 SUSE-SU-2020:0868-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_27 +1 6-2.1 SUSE-SU-2020:0868-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_29 4-2.1 SUSE-SU-2020:0868-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_30 3-2.1 SUSE-SU-2020:0868-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_31 +2 2-2.1 SUSE-SU-2020:3656-1, SUSE-SU-2020:3219-1, SUSE-SU-2020:1779-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_32 +4 2-2.2 SUSE-SU-2021:1074-1, SUSE-SU-2021:0835-1, SUSE-SU-2020:2502-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_39 1-4.3.1 SUSE-SU-2021:1623-1
Show 20 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP2 kernel-syms +2 4.4.121-92.155.1 SUSE-SU-2021:1617-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_28 +1 9-2.1 SUSE-SU-2020:0868-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_30 8-2.1 SUSE-SU-2020:0868-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_31 7-2.1 SUSE-SU-2020:0868-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_32 6-2.1 SUSE-SU-2020:0868-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_33 4-2.1 SUSE-SU-2020:0868-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_34 +2 2-2.1 SUSE-SU-2020:3648-1, SUSE-SU-2020:3219-1, SUSE-SU-2020:1486-1
SLES 12 SP2 kgraft-patch-SLE12-SP2_Update_35 +2 2-2.2 SUSE-SU-2021:0835-1, SUSE-SU-2020:2502-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_33 9-2.1 SUSE-SU-2020:0868-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_34 8-2.1 SUSE-SU-2020:0868-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 6-2.1 SUSE-SU-2020:0868-1
SLES 12 SP1 kgraft-patch-SLE12-SP1_Update_37 4-2.1 SUSE-SU-2020:0868-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.58.1 SUSE-SU-2020:2610-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.25.1 SUSE-SU-2020:2540-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.37.1 SUSE-SU-2020:2574-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.60.1 SUSE-SU-2020:2623-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.144.1 SUSE-SU-2021:1623-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_24 +2 8-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_27 +1 6-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_29 4-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_30 3-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_31 +2 2-2.1 SUSE-SU-2020:3656-1, SUSE-SU-2020:3219-1, SUSE-SU-2020:1779-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_32 +4 2-2.2 SUSE-SU-2021:1074-1, SUSE-SU-2021:0835-1, SUSE-SU-2020:2502-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_39 1-4.3.1 SUSE-SU-2021:1623-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_28 +1 9-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_30 8-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_31 7-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_32 6-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_33 4-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_34 +2 2-2.1 SUSE-SU-2020:3648-1, SUSE-SU-2020:3219-1, SUSE-SU-2020:1486-1
SLES for SAP 12 SP2 kgraft-patch-SLE12-SP2_Update_35 +2 2-2.2 SUSE-SU-2021:0835-1, SUSE-SU-2020:2502-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_33 9-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_34 8-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_35 +1 6-2.1 SUSE-SU-2020:0868-1
SLES for SAP 12 SP1 kgraft-patch-SLE12-SP1_Update_37 4-2.1 SUSE-SU-2020:0868-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.19.1 SUSE-SU-2020:2999-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.56.1 SUSE-SU-2020:2575-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_0 10-28.2 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_1 9-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_10 +3 2-2.2 SUSE-SU-2020:2534-1, SUSE-SU-2020:2517-1, SUSE-SU-2020:1049-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_15 1-3.3.2 SUSE-SU-2020:2575-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_2 8-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_3 +1 6-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_5 +1 5-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_7 +1 3-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_9 +1 2-2.1 SUSE-SU-2020:1452-1, SUSE-SU-2020:0891-1
SLE Live Patching 15 kernel-default 4.12.14-150.58.1 SUSE-SU-2020:2610-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_11 7-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_12 +1 6-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_14 +1 5-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_16 3-2.2 SUSE-SU-2020:0940-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_17 3-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_18 +1 2-2.2 SUSE-SU-2020:2525-1, SUSE-SU-2020:2524-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_20 1-1.3.1 SUSE-SU-2020:2610-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_9 +1 8-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.37.1 SUSE-SU-2020:2574-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_0 3-6.2 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_1 +1 3-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_3 +1 2-2.1 SUSE-SU-2020:1452-1, SUSE-SU-2020:0891-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_5 +3 2-2.2 SUSE-SU-2020:2534-1, SUSE-SU-2020:2517-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_9 1-8.5.1 SUSE-SU-2020:2574-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.60.1 SUSE-SU-2020:2623-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_10 +1 3-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_12 +1 2-2.1 SUSE-SU-2020:1452-1, SUSE-SU-2020:0891-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_14 +1 2-2.2 SUSE-SU-2020:2534-1, SUSE-SU-2020:2509-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_16 1-6.3.1 SUSE-SU-2020:2623-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_4 8-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_5 7-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_6 +1 6-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_8 5-2.1 SUSE-SU-2020:0868-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_9 4-2.1 SUSE-SU-2020:0868-1
SLE HPC 15 kernel-docs +5 4.12.14-150.58.1 SUSE-SU-2020:2610-1
SUSE Real Time Module 15 SP1 kernel-rt +3 4.12.14-14.36.1 SUSE-SU-2020:3014-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.60.1 SUSE-SU-2020:2623-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.144.1 SUSE-SU-2021:1623-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_39 1-4.3.1 SUSE-SU-2021:1623-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.60.1 SUSE-SU-2020:2623-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.144.1 SUSE-SU-2021:1623-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_39 1-4.3.1 SUSE-SU-2021:1623-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.144.1 SUSE-SU-2021:1623-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_39 1-4.3.1 SUSE-SU-2021:1623-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.2 kernel-rt +3 5.3.18-lp152.3.5.1 openSUSE-SU-2021:0242-1
openSUSE Leap 15.1 kernel-docs +8 4.12.14-lp151.28.63.1 openSUSE-SU-2020:1325-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 kernel-livepatch-4.14.181-140.257 1.0-0.amzn2 ALAS2-2020-1431
Amazon Linux 2 perf +8 4.14.181-140.257.amzn2 ALAS2-2020-1431

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-193.el8 ELSA-2020-1769
Oracle Linux 7 kernel-uek +5 4.1.12-124.43.4.el7uek ELSA-2020-5866
Oracle Linux 7 perf +12 3.10.0-1160.el7 ELSA-2020-4060

Advisories 43

References