An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and remote code execution via HELLO or one of the AUTH frames. This occurs because of an untrusted length taken from a TCP packet in ceph_decode_32.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perf | Oct 17, 2023 | Sep 29, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-livepatch-6.1.41-63.109 | Feb 17, 2025 | Sep 29, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 15, 2023 | Sep 29, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 29, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel | Nov 15, 2023 | Sep 29, 2023 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1015-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-azureUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.2 | Oct 6, 2023 | Sep 29, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub