A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade rtlaUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-core | May 15, 2023 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.294-220.533Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade perf | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jul 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools | Mar 9, 2023 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libs | Dec 9, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Nov 15, 2022 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 5, 2022 | Jul 21, 2022 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-vanillaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade reiserfs-kmp-preemptUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade kselftests-kmp-preemptUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-ec2-develUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-ec2-baseUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-alUpgrade dtb-armUpgrade kernel-xenUpgrade kernel-debug-baseUpgrade ocfs2-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-vanilla-livepatch-develUpgrade kernel-ec2Upgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-vanilla-develUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-trace-baseUpgrade kernel-xen-baseUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-docsUpgrade dtb-caviumUpgrade cluster-md-kmp-preemptUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-vanilla-baseUpgrade dlm-kmp-rtUpgrade kernel-trace-develUpgrade kernel-preempt-extraUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-xen-develUpgrade dtb-alteraUpgrade kernel-kvmsmall-baseUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-optional | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1143-awsUpgrade linux-image-5.15.0-53-lowlatencyUpgrade linux-image-5.15.0-1008-gkeopUpgrade linux-image-5.15.0-53-generic-64kUpgrade linux-image-5.15.0-1022-gcpUpgrade linux-image-5.15.0-1018-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-5.15.0-1020-gkeUpgrade linux-image-5.4.0-1057-gkeopUpgrade linux-image-5.4.0-1050-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1022-oracleUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1089-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1023-azureUpgrade linux-image-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1018-raspi-nolpaeUpgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1113-awsUpgrade linux-image-5.15.0-1021-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-5.4.0-132-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-53-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.17.0-1020-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1037-ibmUpgrade linux-image-5.15.0-53-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1074-raspiUpgrade linux-image-5.15.0-53-lowlatency-64kUpgrade linux-image-4.15.0-197-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1095-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1095-azureUpgrade linux-image-5.4.0-1087-oracleUpgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-5.15.0-1018-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1023-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-132-genericUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1079-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1157-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-132-lowlatencyUpgrade linux-image-5.15.0-1018-raspiUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-5.4.0-1087-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1093-gcp | Oct 1, 2022 | Aug 31, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub