A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
CVSS Details
- CVSS 4.0 Base Score: 8.6 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-doc | Sep 9, 2022 | Mar 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Jul 4, 2022 | Mar 29, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 11, 2022 | Mar 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Aug 2, 2022 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 11, 2022 | Mar 29, 2022 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-tools-libs-devel | Mar 12, 2024 | Mar 29, 2022 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dlm-kmp-preemptUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade ocfs2-kmp-preemptUpgrade dtb-marvellUpgrade kernel-preemptUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade reiserfs-kmp-preemptUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade cluster-md-kmp-preemptUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-amd | Oct 26, 2022 | Mar 29, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-azureUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-107-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-5.13.0-39-genericUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-1074-azureUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.13.0-1021-awsUpgrade linux-image-generic-lpae | Mar 31, 2022 | Mar 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub