The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-debug-core | Nov 4, 2022 | May 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-4.14.281-212.502Upgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.43-20.103 | Jul 4, 2022 | May 12, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 10, 2022 | May 12, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 12, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 3, 2022 | May 12, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Aug 2, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade perf | Aug 18, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 11, 2022 | May 12, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 4, 2022 | May 12, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 3, 2022 | May 12, 2022 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-debuginfo | Mar 12, 2024 | May 12, 2022 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-preempt-livepatch-develUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-vanillaUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-debugUpgrade cluster-md-kmp-preemptUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-preempt-optionalUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-defaultUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-default-kgraftUpgrade kernel-vanilla-baseUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kselftests-kmp-preemptUpgrade dtb-exynosUpgrade kernel-preemptUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade dtb-alUpgrade kernel-source-vanillaUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-devel | Oct 26, 2022 | May 12, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1007-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1075-gcpUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1062-raspiUpgrade linux-image-5.13.0-44-generic-64kUpgrade linux-image-5.15.0-33-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1072-gkeUpgrade linux-image-5.15.0-33-generic-64kUpgrade linux-image-5.13.0-1028-raspi-nolpaeUpgrade linux-image-4.15.0-180-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1008-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-180-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-33-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1005-gcpUpgrade linux-image-5.15.0-33-lowlatencyUpgrade linux-image-5.4.0-113-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1080-azure-fdeUpgrade linux-image-5.15.0-1007-azureUpgrade linux-image-4.4.0-227-lowlatencyUpgrade linux-image-5.13.0-1027-gcpUpgrade linux-image-5.15.0-1008-awsUpgrade linux-image-5.4.0-113-lowlatencyUpgrade linux-image-5.4.0-1073-oracleUpgrade linux-image-5.15.0-1006-oracleUpgrade linux-image-4.4.0-227-genericUpgrade linux-image-5.4.0-1065-kvmUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1080-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1095-oracleUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-1108-kvmUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-44-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.4.0-1143-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-33-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.13.0-1025-azureUpgrade linux-image-4.15.0-1124-gcpUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1130-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1008-raspi-nolpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1116-kvmUpgrade linux-image-5.13.0-1030-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1028-raspiUpgrade linux-image-5.13.0-44-generic-lpaeUpgrade linux-image-5.13.0-1025-awsUpgrade linux-image-5.4.0-1036-bluefieldUpgrade linux-image-5.4.0-1075-awsUpgrade linux-image-4.15.0-1129-snapdragonUpgrade linux-image-4.4.0-1107-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1005-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1004-ibmUpgrade linux-image-5.4.0-113-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1024-kvmUpgrade linux-image-5.13.0-44-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1130-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-180-genericUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-1111-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1023-ibmUpgrade linux-image-5.4.0-1043-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1139-azure | May 25, 2022 | May 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub