An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.68-62.173-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.62-55.141-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.10.68-62.173Upgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-tools | Jul 4, 2022 | Nov 2, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kernel-rt | Nov 16, 2021 | Nov 15, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 2, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | Nov 2, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Nov 15, 2021 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-rt-devel | May 5, 2022 | Nov 2, 2021 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-devel | Oct 26, 2022 | Nov 2, 2021 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1021-kvmUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1009-azureUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.11.0-44-generic-64kUpgrade linux-image-5.11.0-1023-oracleUpgrade linux-image-5.13.0-23-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1023-azureUpgrade linux-image-virtualUpgrade linux-image-5.11.0-1024-raspi-nolpaeUpgrade linux-image-5.13.0-1007-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1012-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-23-generic-lpaeUpgrade linux-image-5.13.0-1008-awsUpgrade linux-image-5.13.0-23-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1024-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1012-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.10.0-1053-oemUpgrade linux-image-5.13.0-1008-gcpUpgrade linux-image-5.11.0-44-generic-lpaeUpgrade linux-image-5.11.0-44-lowlatencyUpgrade linux-image-5.13.0-1011-oracleUpgrade linux-image-5.14.0-1008-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.11.0-1023-awsUpgrade linux-image-5.11.0-1024-gcpUpgrade linux-image-5.13.0-23-lowlatencyUpgrade linux-image-5.13.0-1026-oemUpgrade linux-image-5.11.0-44-generic | Dec 1, 2021 | Nov 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub