A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-doc | Jul 22, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-4.14.275-207.503Upgrade kernel-toolsUpgrade bpftool | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 20, 2022 | Mar 23, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1Upgrade kernelUpgrade kpatch-patch-4_18_0-372_9_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1-debugsource | Jun 29, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jun 7, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade python3-perf | Jun 22, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 11, 2022 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-modules | Mar 12, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade dtb-alUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dlm-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-preempt-extraUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-preempt-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-broadcom | Oct 26, 2022 | Mar 23, 2022 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1126-aws-hweUpgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-39-genericUpgrade linux-image-gcpUpgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-4.15.0-1107-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-virtualUpgrade linux-image-4.15.0-175-generic-lpaeUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1125-snapdragonUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-175-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1040-dell300xUpgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-4.15.0-175-genericUpgrade linux-image-5.14.0-1031-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-4.15.0-1120-gcpUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1126-awsUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1091-oracleUpgrade linux-image-5.4.0-107-genericUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1136-azureUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1074-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-4.15.0-1112-kvmUpgrade linux-image-oracleUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1067-gke | Mar 29, 2022 | Mar 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub