A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-livepatch-5.10.118-111.515Upgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.281-212.502 | Sep 7, 2023 | Aug 16, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 21, 2023 | Jun 9, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf | Feb 17, 2025 | May 14, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Feb 12, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Aug 16, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 3, 2023 | May 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 16, 2023 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-debug-baseUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azureUpgrade dtb-zteUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-develUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-zfcpdump-manUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-vanilla-devel | Sep 15, 2023 | Aug 16, 2023 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1123-awsUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1161-awsUpgrade linux-image-4.4.0-245-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1124-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-245-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtual | Sep 20, 2023 | Aug 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Aug 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub