API Gateway 11 Security Advisory for Debian 11 Systems Using Netfilter

Products

• CA API Gateway

Issue/Introduction

There is a notification about a new vulnerability in an older CVE affecting Debian 11 systems using netfilter. The advisory states it was patched in 5.10.179 and beyond but the Gateway 11 OVA is on the 5.10.0-20 kernel.

https://ssd-disclosure.com/ssd-advisory-linux-kernel-nft_validate_register_store-integer-overflow-privilege-escalation/ 

How has this vulnerability been addressed?

Environment

API Gateway 11.0

Resolution

An updated kernel (5.10.216) has been provided in the May MPP. The patch can be downloaded from our Solutions & Patches page.