kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privilege escalation because a ucounts object can outlive its namespace.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kbUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-syms | Oct 26, 2022 | Jan 29, 2022 |
| Ubuntu | — | Upgrade linux-image-5.14.0-1022-oemUpgrade linux-image-oem-20.04d | Feb 9, 2022 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub