A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.10.82-83.359-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.93-87.444Upgrade bpftoolUpgrade kernel-tools-debuginfo | Jul 4, 2022 | Feb 11, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jan 18, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kernelUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348 | Feb 17, 2022 | Feb 11, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 11, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 15, 2022 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-modules | May 5, 2022 | Feb 11, 2022 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-extraUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-preempt-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade dtb-broadcomUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-preemptUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade cluster-md-kmp-preemptUpgrade dtb-zteUpgrade dtb-exynosUpgrade dtb-alUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-preemptUpgrade dtb-freescale | Feb 12, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.10.0-1057-oemUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.14.0-1020-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.13.0-1015-raspiUpgrade linux-image-5.13.0-1011-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1061-oracleUpgrade linux-image-5.11.0-49-genericUpgrade linux-image-5.13.0-27-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-27-generic-64kUpgrade linux-image-5.11.0-49-generic-lpaeUpgrade linux-image-5.11.0-1024-kvmUpgrade linux-image-5.4.0-1059-gkeUpgrade linux-image-5.4.0-96-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.13.0-1015-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1028-oemUpgrade linux-image-5.4.0-96-generic-lpaeUpgrade linux-image-5.11.0-1027-raspi-nolpaeUpgrade linux-image-5.11.0-49-generic-64kUpgrade linux-image-5.4.0-1012-ibmUpgrade linux-image-oemUpgrade linux-image-5.4.0-96-genericUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.11.0-1027-azureUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1062-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1028-gcpUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-1027-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.13.0-27-lowlatencyUpgrade linux-image-5.13.0-1012-azureUpgrade linux-image-5.11.0-1027-awsUpgrade linux-image-5.4.0-1067-azureUpgrade linux-image-5.4.0-1025-bluefieldUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.13.0-1015-raspi-nolpaeUpgrade linux-image-5.4.0-1050-raspiUpgrade linux-image-5.13.0-27-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1053-kvmUpgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-intelUpgrade linux-image-5.13.0-1010-kvmUpgrade linux-image-5.11.0-49-lowlatencyUpgrade linux-image-5.11.0-1027-oracleUpgrade linux-image-5.4.0-1031-gkeopUpgrade linux-image-5.13.0-1012-gcp | Apr 1, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub