The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-core | Nov 4, 2022 | May 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.281-212.502Upgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headers | Jul 4, 2022 | May 12, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 10, 2022 | May 12, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-devel | Feb 17, 2025 | May 12, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 3, 2022 | May 12, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Aug 2, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Aug 18, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 11, 2022 | May 12, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 4, 2022 | May 12, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 3, 2022 | May 12, 2022 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-devel | Mar 12, 2024 | May 12, 2022 |
| Suse | — | Upgrade kernel-default-kgraftUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-preempt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-debug-baseUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dtb-zteUpgrade dtb-alUpgrade kernel-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kernel-vanilla-livepatch-devel | Oct 26, 2022 | May 12, 2022 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-180-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1007-azureUpgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1008-awsUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1080-azure-fdeUpgrade linux-image-4.15.0-1095-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1005-gcpUpgrade linux-image-5.15.0-33-lowlatencyUpgrade linux-image-5.15.0-1008-raspiUpgrade linux-image-5.4.0-1072-gkeUpgrade linux-image-4.4.0-227-genericUpgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1108-kvmUpgrade linux-image-5.4.0-1073-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-33-generic-64kUpgrade linux-image-5.15.0-33-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1080-azureUpgrade linux-image-4.4.0-227-lowlatencyUpgrade linux-image-5.15.0-33-lowlatency-64kUpgrade linux-image-5.13.0-1027-gcpUpgrade linux-image-5.4.0-1062-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1006-oracleUpgrade linux-image-5.13.0-44-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-113-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-1007-kvmUpgrade linux-image-5.4.0-1075-gcpUpgrade linux-image-5.4.0-113-generic-lpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.13.0-1028-raspi-nolpaeUpgrade linux-image-5.4.0-1065-kvmUpgrade linux-image-5.13.0-44-generic-64kUpgrade linux-image-4.15.0-180-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1124-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-1025-azureUpgrade linux-image-5.13.0-1024-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.13.0-44-genericUpgrade linux-image-5.4.0-1023-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1130-aws-hweUpgrade linux-image-4.15.0-180-genericUpgrade linux-image-5.15.0-1005-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-33-genericUpgrade linux-image-4.15.0-1116-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1129-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.13.0-1025-awsUpgrade linux-image-5.4.0-1036-bluefieldUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-5.4.0-1075-awsUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1130-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1143-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1139-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-5.13.0-1030-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1111-raspi2Upgrade linux-image-5.13.0-44-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-113-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1008-raspi-nolpaeUpgrade linux-image-5.15.0-1004-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1028-raspiUpgrade linux-image-5.4.0-1043-gkeopUpgrade linux-image-raspi-hwe-18.04 | May 25, 2022 | May 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub