A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Apr 22, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfo | May 26, 2021 | Apr 22, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | Apr 22, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 10, 2021 | Apr 22, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Apr 22, 2021 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-sourceUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Jun 28, 2021 | Apr 22, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 2, 2021 | Apr 22, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 15, 2021 | Apr 18, 2021 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 10, 2021 | Apr 22, 2021 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-source | Jun 9, 2021 | Apr 22, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.8.0-59-generic-64kUpgrade linux-image-5.8.0-1029-raspi-nolpaeUpgrade linux-image-5.8.0-1029-raspiUpgrade linux-image-5.11.0-22-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-77-genericUpgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-5.4.0-1051-azureUpgrade linux-image-4.15.0-1103-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-1009-azureUpgrade linux-image-4.15.0-147-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1089-raspi2Upgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-4.15.0-1106-awsUpgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-4.15.0-1022-dell300xUpgrade linux-image-5.4.0-1051-awsUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1018-gkeopUpgrade linux-image-5.11.0-1011-awsUpgrade linux-image-4.15.0-147-generic-lpaeUpgrade linux-image-5.8.0-1038-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1048-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1038-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1118-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1041-kvmUpgrade linux-image-5.8.0-59-genericUpgrade linux-image-genericUpgrade linux-image-5.4.0-1046-gkeUpgrade linux-image-5.10.0-1033-oemUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.8.0-1035-gcpUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-5.8.0-59-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-147-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-59-lowlatencyUpgrade linux-image-5.8.0-1033-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1075-oracleUpgrade linux-image-dell300xUpgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-5.8.0-1030-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1106-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-1036-azureUpgrade linux-image-5.4.0-77-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1046-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-77-lowlatency | Jun 23, 2021 | Apr 22, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 22, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub