A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-develUpgrade kernel-livepatch-4.14.276-211.499Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf | Jun 11, 2024 | Sep 14, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2024 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Dec 22, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Mar 9, 2023 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Dec 9, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Nov 15, 2022 | Sep 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 14, 2022 |
| Suse | — | Upgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-sourceUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-vanillaUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-preemptUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade kernel-preempt-optionalUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-64kbUpgrade ocfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade dtb-apmUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-preemptUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kselftests-kmp-preemptUpgrade kernel-vanilla-develUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade dtb-alUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-baseUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-broadcomUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade dtb-zteUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-baseUpgrade dtb-rockchipUpgrade dtb-allwinner | Oct 26, 2022 | Sep 14, 2022 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-raspi2Upgrade linux-realtimeUpgrade linux-snapdragonUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-aws-hweUpgrade linux-hwe-5.15Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-azure-4.15Upgrade linux-azure-fdeUpgrade linux-oem-5.14Upgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-iotUpgrade linux-riscvUpgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-dell300xUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-5.15Upgrade linux-oracle-5.4Upgrade linux-oem-5.17 | Nov 19, 2024 | Sep 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub