A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extra | Mar 28, 2023 | Mar 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade python-perf-debuginfo | May 2, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kernelUpgrade kpatch-patch-5_14_0-162_6_1Upgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kpatch-patch-5_14_0-162_18_1-debuginfo | Mar 28, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 28, 2023 | Mar 20, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Mar 28, 2023 | Mar 27, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-modules-extra | Mar 12, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade dtb-alUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdso | Apr 11, 2023 | Mar 30, 2023 |
| Ubuntu | — | Upgrade linux-oem-5.14 | Nov 19, 2024 | Mar 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub