A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.276-211.499 | Jun 11, 2024 | Sep 14, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2024 | Jun 9, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 22, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Mar 9, 2023 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-headers | Dec 9, 2022 | Sep 14, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Nov 15, 2022 | Sep 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 14, 2022 |
| Suse | — | Upgrade kernel-vanilla-develUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-preemptUpgrade dtb-alUpgrade kernel-defaultUpgrade dtb-zteUpgrade kernel-preempt-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-vanilla-baseUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-baseUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-sprdUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-preempt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-default-manUpgrade kernel-vanillaUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-rtUpgrade kernel-debug-baseUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade cluster-md-kmp-preemptUpgrade kernel-default-extraUpgrade dtb-hisilicon | Oct 26, 2022 | Sep 14, 2022 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-snapdragonUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-riscvUpgrade linux-realtimeUpgrade linux-oem-5.14Upgrade linux-azure-fdeUpgrade linux-raspi2Upgrade linux-gcp-4.15Upgrade linux-aws-hweUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-dell300xUpgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-oem-5.17Upgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-lowlatency | Nov 19, 2024 | Sep 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub