A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-64k-debug-core | May 15, 2023 | Aug 31, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.15.69-37.134Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.294-220.533Upgrade bpftool-debuginfoUpgrade kernel-headers | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Aug 31, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-devel | Feb 17, 2025 | Jul 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 31, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 3, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade python-perf | Mar 9, 2023 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade python-perf | Dec 9, 2022 | Aug 31, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Nov 15, 2022 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 5, 2022 | Jul 21, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-kvmsmall-baseUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-trace-develUpgrade kernel-source-vanillaUpgrade kernel-preempt-extraUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-preemptUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-rt_debugUpgrade kernel-preempt-optionalUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade dtb-zteUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-ec2-baseUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-traceUpgrade kernel-debug-baseUpgrade kernel-syms-rtUpgrade kernel-ec2-develUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-vanillaUpgrade dtb-apmUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-livepatch-develUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-default-manUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-preemptUpgrade kernel-obs-qaUpgrade dtb-alUpgrade kernel-xenUpgrade ocfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-default | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1113-awsUpgrade linux-image-5.15.0-53-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-53-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1018-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-5.15.0-53-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-132-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1114-kvmUpgrade linux-image-5.15.0-1020-gkeUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-5.17.0-1020-oemUpgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1057-gkeopUpgrade linux-image-5.15.0-1021-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1050-bluefieldUpgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1023-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1022-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1022-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1089-awsUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1008-gkeopUpgrade linux-image-5.15.0-1018-raspi-nolpaeUpgrade linux-image-5.4.0-1093-gcpUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-234-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1095-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1037-ibmUpgrade linux-image-4.15.0-197-genericUpgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1157-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-132-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-dell300xUpgrade linux-image-5.4.0-1087-oracleUpgrade linux-image-5.4.0-1095-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1151-awsUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1023-awsUpgrade linux-image-5.4.0-1087-gkeUpgrade linux-image-5.15.0-1018-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1018-raspiUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-4.4.0-234-genericUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-aws-hweUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1074-raspiUpgrade linux-image-5.15.0-53-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1079-kvmUpgrade linux-image-5.4.0-132-genericUpgrade linux-image-5.15.0-53-generic-lpaeUpgrade linux-image-virtual-hwe-16.04 | Oct 1, 2022 | Aug 31, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub