An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.294-220.533Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.290-217.505Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.59-33.133 | Sep 30, 2022 | Jul 27, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Jul 27, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfo | Feb 17, 2025 | Jun 2, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 27, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 18, 2023 | Jul 27, 2022 |
| Debian | — | Upgrade linux | Sep 13, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Nov 3, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 27, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 15, 2022 | Jul 27, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 5, 2022 | Jun 2, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 18, 2023 | Jul 27, 2022 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-ec2Upgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade gfs2-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-preempt-livepatch-develUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kernel-trace-develUpgrade kernel-debugUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-xen-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-preempt-optionalUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-xenUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-vanilla-baseUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-debug-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kselftests-kmp-preemptUpgrade dtb-apmUpgrade kernel-vanilla-develUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-xen-baseUpgrade kernel-ec2-baseUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-alUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dlm-kmp-preemptUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-azureUpgrade kernel-traceUpgrade kernel-rtUpgrade dtb-zteUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-azure-livepatch-devel | Oct 26, 2022 | Jul 27, 2022 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-50-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-4.15.0-1143-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-197-lowlatencyUpgrade linux-image-5.15.0-1004-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1021-azureUpgrade linux-image-5.15.0-1019-kvmUpgrade linux-image-oemUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1157-azureUpgrade linux-image-4.15.0-1138-gcpUpgrade linux-image-4.4.0-1118-kvmUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-4.15.0-1139-snapdragonUpgrade linux-image-5.15.0-50-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1017-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-197-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-1021-awsUpgrade linux-image-4.15.0-1143-awsUpgrade linux-image-5.15.0-1016-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1108-oracleUpgrade linux-image-5.15.0-50-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1016-raspi-nolpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-239-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-197-genericUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-239-lowlatencyUpgrade linux-image-4.15.0-1121-raspi2Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-50-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1055-dell300xUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1129-kvmUpgrade linux-image-5.15.0-50-lowlatency-64kUpgrade linux-image-4.4.0-1155-awsUpgrade linux-image-4.4.0-1117-awsUpgrade linux-image-5.15.0-1019-oracleUpgrade linux-image-5.15.0-1019-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1017-intel-iotgUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1054-gkeop | Oct 11, 2022 | Jul 27, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub