A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade python3-perf | May 13, 2022 | Mar 25, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2022 | Mar 25, 2022 |
| Debian | — | Upgrade linux | Mar 10, 2022 | Mar 10, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 20, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-devel | Jun 17, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Apr 19, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 4, 2022 | Sep 29, 2021 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 13, 2022 | Mar 25, 2022 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-modules | Mar 5, 2024 | Mar 25, 2022 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade dtb-alUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-rtUpgrade dtb-alteraUpgrade dlm-kmp-preemptUpgrade kernel-debug-baseUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-preempt-extraUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-64kb-extraUpgrade dtb-zteUpgrade dtb-marvellUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-vanilla-develUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-develUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-vanillaUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-renesasUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade linux-image-4.4.0-239-genericUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-virtual-lts-xenial | Apr 10, 2023 | Mar 25, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub