A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
CVSS Details
- CVSS 4.0 Base Score: 8.6 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules | Sep 9, 2022 | Mar 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Jul 4, 2022 | Mar 29, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-devel | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 11, 2022 | Mar 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Aug 2, 2022 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 16, 2022 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 11, 2022 | Mar 29, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernelUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules | Mar 12, 2024 | Mar 29, 2022 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-preemptUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade dtb-freescaleUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dtb-alUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-armUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade reiserfs-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-zteUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade cluster-md-kmp-default | Oct 26, 2022 | Mar 29, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-5.4.0-107-genericUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-5.13.0-39-genericUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-5.4.0-1074-azureUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04 | Mar 31, 2022 | Mar 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub