There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-debug-modules | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-headersUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-devel | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perf | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-preemptUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade dtb-zteUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-debug-baseUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-manUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-source-vanilla | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1162-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-aws-hweUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-5.15.0-1034-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1151-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.14.0-1059-oemUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-generic-hwe-20.04 | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub