A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-zfcpdump | Jul 22, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.275-207.503Upgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 20, 2022 | Mar 23, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1-debuginfo | Jun 29, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Jun 7, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools | Jun 22, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfo | Mar 12, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-preemptUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dlm-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-preemptUpgrade dtb-alUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade dtb-zteUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extra | Oct 26, 2022 | Mar 23, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-39-genericUpgrade linux-image-4.15.0-1125-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-4.15.0-1040-dell300xUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcpUpgrade linux-image-4.15.0-175-lowlatencyUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-175-generic-lpaeUpgrade linux-image-4.15.0-1107-raspi2Upgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.13.0-1021-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1071-awsUpgrade linux-image-4.15.0-1126-aws-hweUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-dell300xUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-4.15.0-175-genericUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1120-gcpUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1074-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1126-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-5.4.0-107-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-4.15.0-1112-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-4.15.0-1136-azureUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1091-oracleUpgrade linux-image-5.14.0-1031-oemUpgrade linux-image-lowlatency-hwe-20.04 | Mar 29, 2022 | Mar 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub