A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.102-61.139 | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade kernel-zfcpdump-manUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade dtb-alUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-debug-baseUpgrade kernel-syms-rtUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionext | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1027-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1038-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1110-azureUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-genericUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-awsUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1021-raspi-nolpae | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub