A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.128-80.144Upgrade python-perfUpgrade perf | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.49-69.116 | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-vanilla-baseUpgrade kernel-default-optionalUpgrade dtb-zteUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-alUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-vanillaUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-azure-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-devel | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-intelUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-5.4.0-1111-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-generic | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub