A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2023 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1016-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04 | Jan 7, 2023 | Jan 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub