The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade perfUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-devel | Nov 4, 2022 | May 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.281-212.502Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel | Jul 4, 2022 | May 12, 2022 |
| Amazon_linux | — | Upgrade kernel | Jun 10, 2022 | May 12, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade perf-debuginfo | Feb 17, 2025 | May 12, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 3, 2022 | May 12, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Aug 2, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-devel | Aug 18, 2022 | May 12, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 11, 2022 | May 12, 2022 |
| Oracle_linux | — | Upgrade kernel | Nov 4, 2022 | May 12, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 3, 2022 | May 12, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extra | Mar 12, 2024 | May 12, 2022 |
| Suse | — | Upgrade kernel-preemptUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-vanilla-livepatch-develUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-debug-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-docsUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-vanilla-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade dtb-alUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-preempt-optionalUpgrade kernel-azure-extraUpgrade dtb-armUpgrade reiserfs-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kernel-defaultUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-default-develUpgrade gfs2-kmp-preemptUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-preempt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-zfcpdump-manUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-default-kgraftUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-kvmsmall-base | Oct 26, 2022 | May 12, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1027-gcpUpgrade linux-image-5.15.0-1008-raspiUpgrade linux-image-5.4.0-1073-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-4.4.0-227-lowlatencyUpgrade linux-image-5.4.0-1062-raspiUpgrade linux-image-5.15.0-1006-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-33-lowlatency-64kUpgrade linux-image-5.15.0-1005-gcpUpgrade linux-image-5.4.0-1080-azureUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1065-kvmUpgrade linux-image-5.13.0-44-lowlatencyUpgrade linux-image-5.15.0-1007-kvmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1075-gcpUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-33-generic-lpaeUpgrade linux-image-4.4.0-227-genericUpgrade linux-image-5.4.0-113-generic-lpaeUpgrade linux-image-4.4.0-1108-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1007-azureUpgrade linux-image-5.15.0-33-lowlatencyUpgrade linux-image-5.4.0-1080-azure-fdeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-180-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1095-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-33-generic-64kUpgrade linux-image-4.15.0-180-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-113-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1008-awsUpgrade linux-image-5.13.0-1028-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1072-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-5.13.0-44-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.13.0-1030-oracleUpgrade linux-image-5.4.0-1023-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1008-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.13.0-1025-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-113-genericUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1124-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1143-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1130-awsUpgrade linux-image-5.13.0-1025-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1005-gkeUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1024-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1116-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1129-snapdragonUpgrade linux-image-5.13.0-44-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.13.0-44-generic-lpaeUpgrade linux-image-4.15.0-1111-raspi2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1139-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-180-genericUpgrade linux-image-5.15.0-33-genericUpgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1107-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-5.13.0-1028-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1004-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1075-awsUpgrade linux-image-5.4.0-1036-bluefieldUpgrade linux-image-5.4.0-1043-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1130-aws-hweUpgrade linux-image-snapdragon | May 25, 2022 | May 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub