A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-modules | Jan 18, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.320-243.544Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.326-245.539Upgrade bpftoolUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-4.14.322-244.539-debuginfo | Oct 4, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.49-69.116Upgrade perf | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1 | Jan 10, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 12, 2024 | Sep 6, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 10, 2024 | Sep 6, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-core | Mar 5, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-debug-baseUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-baseUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-zteUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rt | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-aws-hweUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-raspiUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-6.1.0-1023-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-genericUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-87-lowlatency-64k | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub