A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade perfUpgrade kernel-tools | Mar 28, 2023 | Mar 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.144-127.601 | May 2, 2023 | Mar 30, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-162_6_1-debugsourceUpgrade kpatch-patch-5_14_0-162_12_1-debugsourceUpgrade kpatch-patch-5_14_0-162_18_1-debuginfoUpgrade kpatch-patch-5_14_0-162_12_1-debuginfoUpgrade kpatch-patch-5_14_0-162_6_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-162_12_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-162_18_1Upgrade kpatch-patch-5_14_0-162_18_1-debugsourceUpgrade kpatch-patch-5_14_0-162_6_1 | Mar 28, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Mar 30, 2023 |
| Oracle_linux | — | Upgrade kernel | Mar 28, 2023 | Mar 20, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 28, 2023 | Mar 27, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-devel | Mar 12, 2024 | Mar 30, 2023 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-alUpgrade dtb-exynosUpgrade dtb-zteUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-socionextUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-devel | Apr 11, 2023 | Mar 30, 2023 |
| Ubuntu | — | Upgrade linux-oem-5.14 | Nov 19, 2024 | Mar 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub