The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 14, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | May 14, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 22, 2021 | May 14, 2021 |
| Debian | — | Upgrade linux | Mar 10, 2022 | May 14, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-devel | Sep 16, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs | Oct 26, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perf | Sep 7, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-devel | Aug 10, 2021 | May 14, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Aug 10, 2021 | May 14, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 13, 2021 | Mar 4, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 22, 2021 | May 14, 2021 |
| Suse | — | Upgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-zteUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-preempt-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-preemptUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade dtb-qcomUpgrade kernel-debugUpgrade kernel-pae-baseUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade gfs2-kmp-preemptUpgrade kernel-ppc64-baseUpgrade kernel-default-extraUpgrade kernel-trace-baseUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-zfcpdump-manUpgrade kernel-preemptUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-debug-baseUpgrade kernel-ec2-develUpgrade kernel-default-optionalUpgrade kernel-bigmem-baseUpgrade kernel-ppc64-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-xen-baseUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-ppc64Upgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-vanillaUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-traceUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-preemptUpgrade kernel-xenUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-ec2Upgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-vanilla-livepatch-develUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-trace-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-pae-develUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-bigmemUpgrade dlm-kmp-preemptUpgrade kernel-bigmem-develUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-default-kgraftUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-vanilla-devel | Nov 9, 2021 | May 14, 2021 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-144-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-4.15.0-1072-oracleUpgrade linux-image-4.15.0-1100-gcpUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.15.0-1086-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.8.0-1033-azureUpgrade linux-image-4.15.0-1115-azureUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-1028-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1103-snapdragonUpgrade linux-image-5.8.0-55-genericUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-4.15.0-144-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-4.15.0-144-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1092-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.8.0-1035-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1103-aws | Jun 3, 2021 | May 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub