A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1016-awsUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi | Jan 7, 2023 | Jan 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub