There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virt | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-livepatch-4.14.304-226.531Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfo | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python3-perf | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-zteUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade dtb-alUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-zfcpdump-manUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade kernel-default-base | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1151-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-5.15.0-1034-azureUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.17.0-1029-oemUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-dell300xUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-awsUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-azureUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1014-raspi | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub