A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-core | Nov 21, 2022 | Jun 9, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 16, 2022 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 9, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 22, 2022 | Jan 27, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 16, 2022 | Jun 9, 2022 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-armUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-docsUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optional | Oct 26, 2022 | Jun 9, 2022 |
| Ubuntu | — | Upgrade linux-gcp-5.13Upgrade linuxUpgrade linux-oem-5.14Upgrade linux-intel-5.13Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.13Upgrade linux-aws-5.13Upgrade linux-oracle-5.13Upgrade linux-hwe-5.13 | Nov 19, 2024 | Jun 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub