A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
CVSS Details
- CVSS 4.0 Base Score: 8.6 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-core | Sep 9, 2022 | Mar 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade perf | Jul 4, 2022 | Mar 29, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-static | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 11, 2022 | Mar 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Aug 2, 2022 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 11, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 11, 2022 | Mar 29, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-devel | Mar 12, 2024 | Mar 29, 2022 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-renesasUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-preempt-optionalUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-preempt-extraUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dtb-alUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-zteUpgrade dtb-broadcomUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-docsUpgrade dlm-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-preempt | Oct 26, 2022 | Mar 29, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-5.4.0-107-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-1021-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1074-azureUpgrade linux-image-oracleUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-39-generic | Mar 31, 2022 | Mar 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub