A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade perfUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt | May 15, 2023 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-livepatch-4.14.294-220.533 | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-devel | Feb 17, 2025 | Jul 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-headers | Mar 9, 2023 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade kernel-headers | Dec 9, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 15, 2022 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 5, 2022 | Jul 21, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade kernel-default-baseUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade kernel-xen-develUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-trace-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-rtUpgrade kernel-xen-baseUpgrade dtb-hisiliconUpgrade kernel-preempt-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-trace-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-traceUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-armUpgrade kselftests-kmp-preemptUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade dlm-kmp-preemptUpgrade kernel-ec2-baseUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-livepatch-develUpgrade dtb-lgUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-ec2-develUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-ec2Upgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-debug-baseUpgrade dtb-alUpgrade ocfs2-kmp-preemptUpgrade kernel-xenUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade dtb-zte | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-5.15.0-53-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1093-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1095-azure-fdeUpgrade linux-image-4.15.0-197-genericUpgrade linux-image-5.4.0-1037-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1018-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-132-lowlatencyUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-5.4.0-1087-oracleUpgrade linux-image-5.4.0-1095-azureUpgrade linux-image-5.15.0-1023-awsUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-5.4.0-1087-gkeUpgrade linux-image-dell300xUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-234-genericUpgrade linux-image-4.15.0-1157-azureUpgrade linux-image-5.4.0-132-genericUpgrade linux-image-5.15.0-53-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1074-raspiUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1079-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1018-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-hweUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1022-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1057-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-53-genericUpgrade linux-image-5.17.0-1020-oemUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1018-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-5.15.0-1008-gkeopUpgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1089-awsUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-53-lowlatencyUpgrade linux-image-5.15.0-1018-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-53-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-5.15.0-1021-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1023-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1050-bluefieldUpgrade linux-image-5.15.0-1020-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-132-generic-lpaeUpgrade linux-image-5.15.0-1022-oracle | Oct 1, 2022 | Aug 31, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub