A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-cross-headers | Jul 22, 2022 | Mar 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.106-102.504Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.275-207.503Upgrade kernel-debuginfo-common-aarch64Upgrade perf | Jul 4, 2022 | Mar 23, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 20, 2022 | Mar 23, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 23, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-4_18_0-372_9_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsource | Jun 29, 2022 | Mar 23, 2022 |
| Debian | — | Upgrade linux | Aug 17, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jun 7, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade perf | Jun 22, 2022 | Mar 23, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 16, 2022 | Mar 23, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 11, 2022 | Mar 11, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 1, 2022 | Mar 23, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-develUpgrade python3-perf | Mar 12, 2024 | Mar 23, 2022 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-preempt-optionalUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kernel-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-symsUpgrade kernel-preempt-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dlm-kmp-preemptUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade dtb-alUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-macros | Oct 26, 2022 | Mar 23, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1071-awsUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-175-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1061-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1125-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1107-raspi2Upgrade linux-image-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1038-gkeopUpgrade linux-image-5.13.0-1021-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1126-aws-hweUpgrade linux-image-5.13.0-39-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1058-raspiUpgrade linux-image-5.13.0-1020-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.13.0-39-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1040-dell300xUpgrade linux-image-5.4.0-107-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-39-generic-lpaeUpgrade linux-image-5.4.0-107-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1021-awsUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-175-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.13.0-1024-raspi-nolpaeUpgrade linux-image-5.13.0-39-lowlatencyUpgrade linux-image-5.14.0-1031-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1136-azureUpgrade linux-image-5.4.0-1074-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-175-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1069-oracleUpgrade linux-image-5.4.0-1067-gkeUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-107-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1120-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1032-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1019-ibmUpgrade linux-image-4.15.0-1112-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1126-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1069-gcpUpgrade linux-image-5.13.0-1025-oracleUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.13.0-1024-raspiUpgrade linux-image-5.4.0-1074-azureUpgrade linux-image-5.13.0-1023-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1091-oracle | Mar 29, 2022 | Mar 23, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub