An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.122-77.145Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-debuginfo-common-x86_64Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_99_1 | Nov 15, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 15, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-zfcpdump-manUpgrade kernel-debugUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-baseUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade dtb-zteUpgrade kernel-vanillaUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-symsUpgrade kernel-kvmsmall-baseUpgrade kernel-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-vanilla-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-syms-rtUpgrade kernel-debug-baseUpgrade kernel-vanilla-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-socionext | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1045-azureUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1108-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-starfiveUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-4.15.0-216-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1169-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-31-genericUpgrade linux-image-serverUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-3.13.0-193-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-82-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04 | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub