A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-modules-coreUpgrade perfUpgrade kernel-rt-debug-kvm | May 15, 2023 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-4.14.294-220.533Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.69-37.134Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Mar 9, 2023 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade python-perf | Dec 9, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Nov 15, 2022 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Jul 21, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-preempt-optionalUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-xen-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-azureUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-preempt-extraUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2Upgrade kernel-default-develUpgrade dtb-zteUpgrade dtb-apmUpgrade kernel-rtUpgrade ocfs2-kmp-preemptUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade dtb-alUpgrade kernel-obs-buildUpgrade kernel-traceUpgrade kselftests-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade dtb-qcomUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-ec2-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-preemptUpgrade kernel-ec2-baseUpgrade dtb-armUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rt | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1021-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-53-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-53-generic-64kUpgrade linux-image-5.4.0-1057-gkeopUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-5.17.0-1020-oemUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1113-awsUpgrade linux-image-snapdragonUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1022-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1023-azureUpgrade linux-image-5.15.0-1008-gkeopUpgrade linux-image-5.4.0-1050-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1020-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1018-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-5.4.0-1089-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-5.4.0-132-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-5.15.0-1018-raspi-nolpaeUpgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-5.15.0-1022-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-53-lowlatencyUpgrade linux-image-5.15.0-1023-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-53-generic-lpaeUpgrade linux-image-5.4.0-1087-gkeUpgrade linux-image-5.4.0-1093-gcpUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1018-ibmUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-197-genericUpgrade linux-image-5.15.0-53-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1087-oracleUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-5.4.0-1074-raspiUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-5.4.0-1095-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-132-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-5.4.0-1079-kvmUpgrade linux-image-5.4.0-1037-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-dell300xUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-132-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1157-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1018-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-5.4.0-1095-azure | Oct 1, 2022 | Aug 31, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub