A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.93-87.444Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.82-83.359-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo | Jul 4, 2022 | Feb 11, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Jan 18, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kernelUpgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kernel-rt | Feb 17, 2022 | Feb 11, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 11, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 15, 2022 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade perfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-core | May 5, 2022 | Feb 11, 2022 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dlm-kmp-preemptUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade gfs2-kmp-preemptUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-preempt-extraUpgrade kernel-preempt-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade dtb-caviumUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade reiserfs-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-preempt-develUpgrade dtb-alUpgrade kernel-azure | Feb 12, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-image-5.10.0-1057-oemUpgrade linux-image-5.13.0-1015-raspiUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.4.0-96-genericUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1059-gkeUpgrade linux-image-5.13.0-1028-oemUpgrade linux-image-5.11.0-49-generic-lpaeUpgrade linux-image-5.11.0-1024-kvmUpgrade linux-image-5.13.0-27-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.11.0-49-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.14.0-1020-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-1027-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.11.0-49-genericUpgrade linux-image-5.11.0-1027-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-96-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-1011-awsUpgrade linux-image-5.4.0-1012-ibmUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1015-oracleUpgrade linux-image-5.4.0-96-lowlatencyUpgrade linux-image-5.4.0-1061-oracleUpgrade linux-image-5.13.0-27-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1053-kvmUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1027-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-1027-raspiUpgrade linux-image-5.13.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1062-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.13.0-1012-gcpUpgrade linux-image-5.11.0-1028-gcpUpgrade linux-image-5.13.0-27-genericUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1050-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1025-bluefieldUpgrade linux-image-5.4.0-1067-azureUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1015-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.13.0-27-lowlatencyUpgrade linux-image-5.11.0-1027-awsUpgrade linux-image-intelUpgrade linux-image-5.13.0-1010-kvmUpgrade linux-image-5.4.0-1031-gkeopUpgrade linux-image-5.11.0-49-lowlatencyUpgrade linux-image-ibm-lts-20.04 | Apr 1, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub