QID 352339

<DIV ID="issue_overview"> a flaw was found in the linux kernel.
A local attacker, able to inject conntrack netlink configuration, could overflow a local buffer causing crashes or triggering the use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c.
The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. (
cve-2020-25211 ) in the linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka cid-1cc5ef91d2ff. (
cve-2020-25211 ) a flaw was found in the capabilities check of the rados block device functionality in the linux kernel.
Incorrect capability checks could alllow a local user with root priviledges (but no capabilities) to add or remove rados block devices from the system. (
cve-2020-25284 ) </DIV>

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.