A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.112-108.499Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-4.14.276-211.499Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Jun 11, 2024 | Sep 14, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2024 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Dec 22, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Mar 9, 2023 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-devel | Dec 9, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Nov 15, 2022 | Sep 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 14, 2022 |
| Suse | — | Upgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-debug-baseUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade cluster-md-kmp-preemptUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-preempt-livepatch-develUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-preemptUpgrade dtb-zteUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-preemptUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdump-manUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-alUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade dtb-allwinner | Oct 26, 2022 | Sep 14, 2022 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-iotUpgrade linux-raspi2Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-oem-5.14Upgrade linux-azureUpgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-hwe-5.15Upgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-riscvUpgrade linux-azure-fdeUpgrade linux-snapdragonUpgrade linux-realtimeUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-oem-5.17Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-dell300xUpgrade linux-azure-5.15Upgrade linux-gke | Nov 19, 2024 | Sep 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub