A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations simultaneously with the overlay FS usage. This flaw allows a local user to crash or potentially escalate their privileges on the system. Only if patch 9a2544037600 ("ovl: fix use after free in struct ovl_aio_req") not applied yet, the kernel could be affected.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-headers | Nov 28, 2023 | Mar 23, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel | Feb 7, 2024 | Mar 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 23, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 23, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Nov 15, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 23, 2023 |
| Ubuntu | — | Upgrade linux-oem-5.14 | Nov 19, 2024 | Mar 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Mar 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub