A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-headersUpgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-livepatch-5.10.162-141.675Upgrade bpftoolUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.157-139.675 | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dtb-alUpgrade dtb-zteUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rt | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-149-genericUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1102-awsUpgrade linux-image-gkeUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-42-genericUpgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-5.4.0-1108-azureUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1036-awsUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1029-raspi-nolpae | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub