A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade perfUpgrade kernel-develUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules | May 15, 2023 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.144-127.601Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.294-220.533Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.69-37.134Upgrade python-perf-debuginfoUpgrade bpftool-debuginfo | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel | Feb 17, 2025 | Jul 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 31, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Nov 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-devel | Mar 9, 2023 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Dec 9, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Nov 15, 2022 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Jul 21, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade kernel-kvmsmall-baseUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-vanilla-develUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-preempt-extraUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade gfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-trace-baseUpgrade kernel-develUpgrade kernel-xen-baseUpgrade kernel-devel-rtUpgrade kernel-vanilla-baseUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-trace-develUpgrade dlm-kmp-preemptUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-ec2Upgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-traceUpgrade kernel-ec2-develUpgrade dlm-kmp-azureUpgrade kernel-preempt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade dtb-apmUpgrade dtb-zteUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-ec2-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-preemptUpgrade ocfs2-kmp-rtUpgrade dtb-alUpgrade dtb-armUpgrade kernel-vanillaUpgrade kernel-docs-htmlUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade kernel-syms-rtUpgrade ocfs2-kmp-preemptUpgrade kernel-rt | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-234-genericUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1095-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1037-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1074-raspiUpgrade linux-image-aws-hweUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1079-kvmUpgrade linux-image-5.4.0-1095-azureUpgrade linux-image-5.15.0-53-lowlatency-64kUpgrade linux-image-dell300xUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-5.4.0-1087-gkeUpgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1157-azureUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-5.15.0-1018-raspiUpgrade linux-image-5.15.0-1018-ibmUpgrade linux-image-5.4.0-132-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1023-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1087-oracleUpgrade linux-image-5.4.0-132-lowlatencyUpgrade linux-image-5.4.0-1093-gcpUpgrade linux-image-4.15.0-197-genericUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-5.15.0-53-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1057-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1023-azureUpgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-bluefieldUpgrade linux-image-4.4.0-1113-awsUpgrade linux-image-5.15.0-1022-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-5.15.0-1008-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-53-generic-64kUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1022-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1018-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-53-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.17.0-1020-oemUpgrade linux-image-5.15.0-53-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-132-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1021-kvmUpgrade linux-image-5.4.0-1050-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-5.15.0-1018-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1089-awsUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1020-gkeUpgrade linux-image-oracle-lts-20.04 | Oct 1, 2022 | Aug 31, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub