There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade rtla | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.165-143.735Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfo | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perf | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kernel-zfcpdump-manUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-apmUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-zteUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-baseUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdso | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1031-awsUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-67-genericUpgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-5.4.0-1097-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-5.17.0-1028-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-awsUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.17.0-1029-oemUpgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-raspi2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-dell300xUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-6.0.0-1012-oemUpgrade linux-image-5.15.0-1034-azureUpgrade linux-image-4.15.0-1151-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-virtual | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub