There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade perfUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-rt-core | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.165-143.735Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-devel | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade dtb-caviumUpgrade kernel-preemptUpgrade dtb-alteraUpgrade kernel-rtUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-zteUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade kernel-source-rtUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-syms | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-dell300xUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1151-awsUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1021-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-6.1.0-1007-oemUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-snapdragonUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-awsUpgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-oemUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-generic-lpae-hwe-20.04 | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub