A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
CVSS Details
- CVSS 4.0 Base Score: 8.6 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-devel | Sep 9, 2022 | Mar 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-tools | Jul 4, 2022 | Mar 29, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jan 31, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 11, 2022 | Mar 29, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Aug 2, 2022 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jun 16, 2022 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Jan 31, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 11, 2022 | Mar 29, 2022 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-modules | Mar 12, 2024 | Mar 29, 2022 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade dtb-armUpgrade kselftests-kmp-preemptUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-zteUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade ocfs2-kmp-preemptUpgrade dtb-alUpgrade kernel-preemptUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-azure | Oct 26, 2022 | Mar 29, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-raspi2Upgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-gkeopUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-virtualUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-39-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-5.4.0-1074-azureUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-5.4.0-107-genericUpgrade linux-image-oemUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-5.13.0-1021-azure | Mar 31, 2022 | Mar 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub