A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This issue occurs when a user simultaneously calls DROPTAG ioctl and socket close happens, which could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 12, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 12, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1016-awsUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-5.19.0-1015-kvm | Jan 7, 2023 | Jan 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub