A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.276-211.499Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-debuginfo-common-aarch64Upgrade perf | Jun 11, 2024 | Sep 14, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2024 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Dec 22, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-headers | Mar 9, 2023 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Dec 9, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Nov 15, 2022 | Sep 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 14, 2022 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-preemptUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dtb-amazonUpgrade cluster-md-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-preempt-optionalUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-rt_debug-develUpgrade dtb-alUpgrade kernel-vanilla-develUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-zfcpdump-manUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade dlm-kmp-preemptUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade dtb-broadcom | Oct 26, 2022 | Sep 14, 2022 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-hweUpgrade linux-oracleUpgrade linux-snapdragonUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-raspi2Upgrade linux-iotUpgrade linux-realtimeUpgrade linux-gcp-4.15Upgrade linux-oem-5.14Upgrade linux-aws-hweUpgrade linux-azure-fdeUpgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-dell300xUpgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-oem-5.17Upgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linuxUpgrade linux-azure-5.15Upgrade linux-ibm-5.4 | Nov 19, 2024 | Sep 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub