A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-doc | Nov 14, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-4.14.256-197.484Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-devel | Jul 4, 2022 | Mar 3, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 15, 2022 | Jul 18, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 9, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-modules | Mar 12, 2024 | Mar 3, 2022 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-ec2Upgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-pae-develUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dlm-kmp-preemptUpgrade kernel-sourceUpgrade kernel-vanilla-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-vanilla-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-zfcpdump-manUpgrade kernel-debug-baseUpgrade kernel-traceUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-bigmem-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-xenUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-default-kgraftUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-bigmemUpgrade kernel-paeUpgrade kernel-bigmem-baseUpgrade kernel-default-livepatchUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-macrosUpgrade kernel-pae-baseUpgrade dtb-nvidiaUpgrade kernel-ec2-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-xen-develUpgrade kernel-default-livepatch-develUpgrade kernel-trace-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade dtb-alUpgrade kernel-preempt-extraUpgrade dtb-qcomUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade kernel-ppc64Upgrade gfs2-kmp-preemptUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-vanillaUpgrade kernel-azure-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-ppc64-baseUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kselftests-kmp-preemptUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-preemptUpgrade kernel-devel | Sep 16, 2021 | Sep 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-virtual-hwe-18.04-edgeUpgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-97-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-18.04-edgeUpgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.4.0-1054-kvmUpgrade linux-image-5.4.0-1063-gcpUpgrade linux-image-5.4.0-1026-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-5.4.0-1068-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1064-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1012-awsUpgrade linux-image-ibmUpgrade linux-image-oemUpgrade linux-image-5.4.0-1062-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1013-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-5.4.0-1032-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-5.4.0-1052-raspiUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-4.15.0-167-genericUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-97-genericUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-5.4.0-97-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-18.04-edge | Feb 3, 2022 | Sep 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub