A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Feb 11, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.82-83.359Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-livepatch-5.10.82-83.359-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Jul 4, 2022 | Feb 11, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-devel | Feb 17, 2025 | Jan 18, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-348-debugsourceUpgrade kpatch-patch-4_18_0-348_2_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1-debugsourceUpgrade kpatch-patch-4_18_0-348_7_1Upgrade kpatch-patch-4_18_0-348Upgrade kpatch-patch-4_18_0-348_2_1Upgrade kpatch-patch-4_18_0-348_2_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-348_7_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-348-debuginfo | Feb 17, 2022 | Feb 11, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Feb 11, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 15, 2022 | Jan 18, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 20, 2022 | Jan 19, 2022 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rtUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-rt-kvm | May 5, 2022 | Feb 11, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-lgUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade dtb-qcomUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade dtb-nvidiaUpgrade kernel-preempt-optionalUpgrade dtb-renesasUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-preemptUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kb | Feb 12, 2022 | Jan 28, 2022 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.10.0-1057-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-96-lowlatencyUpgrade linux-image-5.11.0-1027-raspi-nolpaeUpgrade linux-image-5.13.0-1015-raspiUpgrade linux-image-5.13.0-1010-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-96-genericUpgrade linux-image-5.4.0-1061-oracleUpgrade linux-image-5.13.0-27-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.11.0-49-genericUpgrade linux-image-5.13.0-1011-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1028-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.11.0-1024-kvmUpgrade linux-image-oracleUpgrade linux-image-5.11.0-49-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-27-generic-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1059-gkeUpgrade linux-image-5.4.0-96-generic-lpaeUpgrade linux-image-5.11.0-49-generic-64kUpgrade linux-image-5.14.0-1020-oemUpgrade linux-image-azureUpgrade linux-image-5.4.0-1012-ibmUpgrade linux-image-5.13.0-1015-oracleUpgrade linux-image-5.11.0-1027-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1015-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1053-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-27-lowlatencyUpgrade linux-image-5.13.0-1012-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-1027-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1027-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1050-raspiUpgrade linux-image-5.11.0-1028-gcpUpgrade linux-image-5.4.0-1025-bluefieldUpgrade linux-image-bluefieldUpgrade linux-image-5.13.0-1012-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.13.0-27-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1067-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.11.0-49-lowlatencyUpgrade linux-image-5.13.0-1010-kvmUpgrade linux-image-5.4.0-1062-gcpUpgrade linux-image-5.11.0-1027-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1031-gkeopUpgrade linux-image-intelUpgrade linux-image-raspi2 | Apr 1, 2022 | Feb 11, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub