A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.82-83.359-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfo | Jul 4, 2022 | Feb 11, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade bpftool-debuginfo | Feb 17, 2025 | Jan 18, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kernelUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348-debuginfo | Feb 17, 2022 | Feb 11, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 11, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 15, 2022 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-debuginfo | May 5, 2022 | Feb 11, 2022 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-alUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-zteUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-preemptUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-preempt-develUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-preemptUpgrade kernel-preempt-extraUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-socionext | Feb 12, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1027-awsUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.11.0-1027-oracleUpgrade linux-image-5.11.0-1028-gcpUpgrade linux-image-5.13.0-27-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-49-lowlatencyUpgrade linux-image-5.13.0-1010-kvmUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1062-gcpUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1025-bluefieldUpgrade linux-image-5.4.0-1067-azureUpgrade linux-image-genericUpgrade linux-image-5.13.0-27-genericUpgrade linux-image-5.13.0-1012-gcpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1050-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1015-raspi-nolpaeUpgrade linux-image-5.4.0-1053-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1027-raspiUpgrade linux-image-5.13.0-1012-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1031-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1061-oracleUpgrade linux-image-5.13.0-1011-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1015-oracleUpgrade linux-image-5.4.0-1059-gkeUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-5.11.0-49-generic-64kUpgrade linux-image-5.13.0-1015-raspiUpgrade linux-image-kvmUpgrade linux-image-5.11.0-49-genericUpgrade linux-image-5.4.0-96-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.14.0-1020-oemUpgrade linux-image-oemUpgrade linux-image-5.4.0-96-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-1027-raspi-nolpaeUpgrade linux-image-5.4.0-96-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1012-ibmUpgrade linux-image-gkeUpgrade linux-image-5.11.0-49-generic-lpaeUpgrade linux-image-5.13.0-1028-oemUpgrade linux-image-5.13.0-27-generic-64kUpgrade linux-image-5.11.0-1024-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-1027-azureUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.10.0-1057-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-27-generic-lpae | Apr 1, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub