A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel | Nov 14, 2022 | Mar 3, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.256-197.484Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.82-83.359Upgrade bpftool | Jul 4, 2022 | Mar 3, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 9, 2022 | Mar 3, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 15, 2022 | Jul 18, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 9, 2022 | Mar 3, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-modules-extra | Mar 12, 2024 | Mar 3, 2022 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-xen-baseUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-zteUpgrade kselftests-kmp-preemptUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-ppc64-develUpgrade gfs2-kmp-preemptUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-alUpgrade kernel-ppc64-baseUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-qcomUpgrade kernel-ec2-develUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-xen-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-preempt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-ec2-baseUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade kernel-default-manUpgrade kernel-vanillaUpgrade kernel-ppc64Upgrade kernel-pae-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-sprdUpgrade cluster-md-kmp-preemptUpgrade kernel-macrosUpgrade kernel-trace-baseUpgrade kernel-default-kgraftUpgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-vanilla-baseUpgrade kernel-paeUpgrade kernel-bigmem-baseUpgrade kernel-preempt-develUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-pae-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-preemptUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-vanilla-develUpgrade kernel-ec2Upgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-trace-develUpgrade kernel-zfcpdump-manUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-preemptUpgrade dtb-exynosUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-xenUpgrade dtb-alteraUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-bigmemUpgrade ocfs2-kmp-64kbUpgrade kernel-bigmem-develUpgrade dtb-marvellUpgrade kernel-debug-baseUpgrade dtb-broadcomUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-traceUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-debug | Sep 16, 2021 | Sep 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1032-gkeopUpgrade linux-image-5.4.0-1052-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1130-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-ibmUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-4.15.0-167-lowlatencyUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-5.4.0-97-genericUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04-edgeUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1013-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1062-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-167-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04-edgeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-97-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1064-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1068-azureUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1106-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-97-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1119-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1115-gcpUpgrade linux-image-lowlatency-hwe-18.04-edgeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1086-oracleUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-5.4.0-1026-bluefieldUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.4.0-1054-kvmUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.4.0-1063-gcpUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-167-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1102-raspi2Upgrade linux-image-4.15.0-1034-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-virtual-hwe-18.04-edgeUpgrade linux-image-snapdragonUpgrade linux-image-5.13.0-28-generic | Feb 3, 2022 | Sep 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub