A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-cross-headers | Jul 22, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.275-207.503Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-debuginfo | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 20, 2022 | Mar 23, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-4_18_0-372_9_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kernel | Jun 29, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jun 7, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Jun 22, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 11, 2022 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-modules | Mar 12, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade ocfs2-kmp-preemptUpgrade dtb-alUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade gfs2-kmp-preemptUpgrade dtb-armUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-extraUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-default | Oct 26, 2022 | Mar 23, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1040-dell300xUpgrade linux-image-5.4.0-1071-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1126-aws-hweUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-39-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-4.15.0-1107-raspi2Upgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-175-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-4.15.0-1125-snapdragonUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-oemUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-4.15.0-175-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-4.15.0-1112-kvmUpgrade linux-image-5.14.0-1031-oemUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-107-genericUpgrade linux-image-raspiUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1126-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1136-azureUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1074-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-4.15.0-1120-gcpUpgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1091-oracleUpgrade linux-image-awsUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-175-generic | Mar 29, 2022 | Mar 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub