Detections
Analytics
Bottlerocket: kernel-5.10, kernel-6.1: security update to 2.3.2
high Tenable Cloud Security Plugin ID 427957
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for
short frame The cited commit missed to check against the validity of the frame length in the
tap_get_user_xdp() path, which could cause a corrupted skb to be sent downstack. Even before the skb is
transmitted, the tap_get_user_xdp()-->skb_set_network_header() may assume the size is more than ETH_HLEN.
Once transmitted, this could either cause out-of-bound access beyond the actual length, or confuse the
underlayer with incorrect or inconsistent header length in the skb metadata. In the alternative path,
tap_get_user() already prohibits short frame which has the length less than Ethernet header size from
being transmitted. This is to drop any frame shorter than the Ethernet header size just like how
tap_get_user() does. CVE: CVE-2024-41090 (CVE-2024-41090)
Plugin Details
Severity: High
ID: 427957
Version: Revision 1.2
Type: Local
Published: 6/30/2025
Updated: 9/29/2025
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: High
Score: 7
Percentile: 98.4
CVSS v2
Risk Factor: Medium
Base Score: 6.2
Temporal Score: 4.6
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:N/A:C
CVSS Score Source: CVE-2024-41090
CVSS v3
Risk Factor: High
Base Score: 7.1
Temporal Score: 6.2
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 7/29/2024
Reference Information
CVE: CVE-2024-41090