A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-kvm | Jul 22, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.275-207.503Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.106-102.504Upgrade python-perf-debuginfo | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 20, 2022 | Mar 23, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kernelUpgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1-debuginfo | Jun 29, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jun 7, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel | Jun 22, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 1, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-debug-kvm | Mar 12, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade gfs2-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-debugUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-preempt-livepatch-develUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-zteUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade dlm-kmp-preemptUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-azure-optional | Oct 26, 2022 | Mar 23, 2022 |
| Ubuntu | — | Upgrade linux-image-snapdragonUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1040-dell300xUpgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1125-snapdragonUpgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-4.15.0-175-lowlatencyUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-5.13.0-39-genericUpgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-175-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1126-aws-hweUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1107-raspi2Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1071-awsUpgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-4.15.0-1120-gcpUpgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-4.15.0-175-genericUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1074-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.14.0-1031-oemUpgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1136-azureUpgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-107-genericUpgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-4.15.0-1112-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1091-oracleUpgrade linux-image-dell300xUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1126-aws | Mar 29, 2022 | Mar 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub