A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-devel-matched | Nov 21, 2022 | Jun 9, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2022 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 9, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 22, 2022 | Jan 27, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2022 | Jun 9, 2022 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-html | Oct 26, 2022 | Jun 9, 2022 |
| Ubuntu | — | Upgrade linux-aws-5.13Upgrade linux-gcp-5.13Upgrade linuxUpgrade linux-oem-5.14Upgrade linux-intel-iotg-5.15Upgrade linux-intel-5.13Upgrade linux-azure-5.13Upgrade linux-oracle-5.13Upgrade linux-hwe-5.13 | Nov 19, 2024 | Jun 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub