The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-modules-extra | Nov 4, 2022 | May 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.281-212.502Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo | Jul 4, 2022 | May 12, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 10, 2022 | May 12, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade bpftoolUpgrade kernel-tools-debuginfo | Feb 17, 2025 | May 12, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 3, 2022 | May 12, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Aug 2, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Aug 18, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 11, 2022 | May 12, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 4, 2022 | May 12, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 3, 2022 | May 12, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt | Mar 12, 2024 | May 12, 2022 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-default-kgraftUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-zfcpdump-manUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-symsUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-preempt-extraUpgrade dtb-freescaleUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dlm-kmp-preemptUpgrade dtb-zteUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-default-manUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-alUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-vanilla-develUpgrade kselftests-kmp-preemptUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-docsUpgrade ocfs2-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-debug-baseUpgrade kernel-syms-azure | Oct 26, 2022 | May 12, 2022 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1143-awsUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-180-genericUpgrade linux-image-5.15.0-1005-gkeUpgrade linux-image-oemUpgrade linux-image-4.15.0-1116-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1130-awsUpgrade linux-image-4.15.0-1129-snapdragonUpgrade linux-image-4.15.0-1111-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1025-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1023-ibmUpgrade linux-image-5.15.0-1008-raspi-nolpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1030-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1043-gkeopUpgrade linux-image-5.13.0-44-generic-lpaeUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-4.15.0-1130-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.13.0-1025-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1036-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-33-genericUpgrade linux-image-5.13.0-1028-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1004-ibmUpgrade linux-image-5.4.0-113-genericUpgrade linux-image-5.13.0-44-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.13.0-1024-kvmUpgrade linux-image-4.15.0-1124-gcpUpgrade linux-image-4.15.0-1139-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1075-awsUpgrade linux-image-5.4.0-1062-raspiUpgrade linux-image-5.13.0-44-lowlatencyUpgrade linux-image-4.15.0-180-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.4.0-227-genericUpgrade linux-image-5.15.0-1005-gcpUpgrade linux-image-5.15.0-33-generic-lpaeUpgrade linux-image-5.4.0-1080-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1007-azureUpgrade linux-image-5.4.0-113-generic-lpaeUpgrade linux-image-5.15.0-33-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-33-lowlatency-64kUpgrade linux-image-5.15.0-1006-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1072-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1080-azure-fdeUpgrade linux-image-5.4.0-113-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-5.13.0-1028-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-5.13.0-44-generic-64kUpgrade linux-image-5.4.0-1065-kvmUpgrade linux-image-5.4.0-1075-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-1073-oracleUpgrade linux-image-5.13.0-1027-gcpUpgrade linux-image-4.4.0-227-lowlatencyUpgrade linux-image-5.15.0-1008-raspiUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-33-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1095-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1007-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1008-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-180-generic-lpaeUpgrade linux-image-4.4.0-1108-kvm | May 25, 2022 | May 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub