An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-modules | Dec 4, 2023 | Jul 24, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.79-51.138Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.155-138.670Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo | Aug 8, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-362_8_1-debugsourceUpgrade kpatch-patch-5_14_0-362_13_1-debugsourceUpgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kpatch-patch-5_14_0-362_13_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-513_5_1-debugsourceUpgrade kpatch-patch-4_18_0-513_5_1Upgrade kpatch-patch-4_18_0-513_5_1-debuginfoUpgrade kpatch-patch-5_14_0-362_13_1 | Nov 29, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 2, 2023 | Oct 22, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 22, 2023 | Jul 24, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-devel | Mar 5, 2024 | Jul 24, 2023 |
| Suse | — | Upgrade kernel-preemptUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-zteUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-vanilla-develUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kb | Aug 4, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade linux-xilinx-zynqmpUpgrade linux-gkeop-5.15Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-raspiUpgrade linux-starfiveUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-azureUpgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-gkeopUpgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-riscv-5.15Upgrade linux-azure-5.4Upgrade linux-hwe-5.19Upgrade linux-gcp-4.15Upgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-oem-6.0Upgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-aws | Nov 19, 2024 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub