There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-uki-virt | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.165-143.735Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-zteUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-preemptUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-baseUpgrade dtb-freescaleUpgrade kernel-debug-baseUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-xilinx | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.4Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.14.0-1059-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1151-awsUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.19.0-35-genericUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-oemUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-5.15.0-1025-raspi | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub