An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.290-217.505Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernelUpgrade kernel-livepatch-5.15.59-33.133Upgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.294-220.533Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools | Sep 30, 2022 | Jul 27, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Jul 27, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel | Feb 17, 2025 | Jun 2, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 18, 2023 | Jul 27, 2022 |
| Debian | — | Upgrade linux | Sep 13, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Nov 3, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perf | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 15, 2022 | Jul 27, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 18, 2023 | Jul 27, 2022 |
| Suse | — | Upgrade dtb-armUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-ec2Upgrade dtb-allwinnerUpgrade kernel-xen-develUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-ec2-develUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-trace-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-trace-develUpgrade kernel-zfcpdump-manUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-ec2-baseUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade dtb-alUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade dlm-kmp-preemptUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-xenUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-xen-baseUpgrade kernel-vanilla-develUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-traceUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-debug-baseUpgrade ocfs2-kmp-preemptUpgrade dtb-zteUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms | Oct 26, 2022 | Jul 27, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.15.0-50-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-197-genericUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1016-raspi-nolpaeUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-5.15.0-1019-gcpUpgrade linux-image-5.15.0-1019-oracleUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1017-intel-iotgUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-4.4.0-239-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1016-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1021-awsUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-50-lowlatency-64kUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-5.15.0-50-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.15.0-1004-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1019-kvmUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-50-generic-64kUpgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1021-azureUpgrade linux-image-5.15.0-1017-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.15.0-50-genericUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1157-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1076-kvm | Oct 11, 2022 | Jul 27, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub