A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade perf | May 13, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 20, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Jun 17, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Apr 19, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 4, 2022 | Sep 29, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 13, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade kernel-vanilla-baseUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dlm-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade dtb-zteUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-extraUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-alUpgrade cluster-md-kmp-64kbUpgrade kernel-vanilla-develUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-livepatch-develUpgrade dtb-caviumUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-baseUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-socionext | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenial | Apr 10, 2023 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub