An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Nov 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.68-62.173Upgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.62-55.141-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.68-62.173-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo | Jul 4, 2022 | Nov 2, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348Upgrade kernelUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kernel-rt | Nov 16, 2021 | Nov 15, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 2, 2021 |
| Oracle_linux | — | Upgrade kernel | Nov 18, 2021 | Nov 2, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2021 | Nov 15, 2021 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfo | May 5, 2022 | Nov 2, 2021 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-build | Oct 26, 2022 | Nov 2, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-23-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1007-kvmUpgrade linux-image-5.13.0-1009-azureUpgrade linux-image-5.11.0-1023-oracleUpgrade linux-image-5.11.0-44-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.11.0-1021-kvmUpgrade linux-image-5.13.0-23-generic-64kUpgrade linux-image-5.11.0-1023-azureUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.13.0-1008-awsUpgrade linux-image-gkeUpgrade linux-image-5.13.0-23-generic-lpaeUpgrade linux-image-5.13.0-1012-raspi-nolpaeUpgrade linux-image-5.11.0-1024-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.10.0-1053-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-44-genericUpgrade linux-image-5.13.0-1026-oemUpgrade linux-image-raspiUpgrade linux-image-5.13.0-23-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1011-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.14.0-1008-oemUpgrade linux-image-5.11.0-44-generic-lpaeUpgrade linux-image-5.13.0-1008-gcpUpgrade linux-image-5.11.0-1024-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1012-raspiUpgrade linux-image-5.11.0-1023-awsUpgrade linux-image-5.11.0-44-lowlatencyUpgrade linux-image-5.11.0-1024-gcpUpgrade linux-image-generic-64k | Dec 1, 2021 | Nov 2, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub