The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 14, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 14, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 22, 2021 | May 14, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | May 14, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Sep 16, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Oct 26, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Sep 7, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-sourceUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Aug 10, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Aug 10, 2021 | May 14, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 13, 2021 | Mar 4, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 22, 2021 | May 14, 2021 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-bigmemUpgrade kernel-bigmem-develUpgrade kernel-trace-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-preemptUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-ec2Upgrade dtb-renesasUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-default-manUpgrade kernel-xenUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-pae-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-preemptUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-paeUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-baseUpgrade kernel-default-kgraftUpgrade kernel-kvmsmallUpgrade kernel-ppc64-develUpgrade kernel-default-extraUpgrade kernel-zfcpdump-manUpgrade kernel-debugUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-zteUpgrade kernel-ec2-baseUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-bigmem-baseUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-ppc64-baseUpgrade kernel-debug-baseUpgrade kernel-default-optionalUpgrade kernel-trace-baseUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-ppc64Upgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-xen-baseUpgrade kernel-vanilla-baseUpgrade kernel-syms-azureUpgrade dtb-alUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-xen-develUpgrade gfs2-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-ec2-develUpgrade kernel-pae-base | Nov 9, 2021 | May 14, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1086-raspi2Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1072-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1115-azureUpgrade linux-image-4.15.0-1100-gcpUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-5.8.0-1033-azureUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-4.15.0-144-genericUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-144-lowlatencyUpgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-5.8.0-55-genericUpgrade linux-image-genericUpgrade linux-image-5.8.0-1035-awsUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1103-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1103-awsUpgrade linux-image-4.15.0-1092-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-4.15.0-144-generic-lpaeUpgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.8.0-1028-kvm | Jun 3, 2021 | May 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub