There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not require any privilege.
There is a use-after-free bug of icsk_ulp_data of a struct inet_connection_sock.
When CONFIG_TLS is enabled, user can install a tls context (struct tls_context) on a connected tcp socket. The context is not cleared if this socket is disconnected and reused as a listener. If a new socket is created from the listener, the context is inherited and vulnerable.
The setsockopt TCP_ULP operation does not require any privilege.
We recommend upgrading past commit 2c02d41d71f90a5168391b6a5f2954112ba2307c
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-devel | May 15, 2023 | Feb 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.304-226.531Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.165-143.735 | Feb 7, 2024 | Feb 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Apr 11, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-tools | Feb 17, 2025 | Feb 23, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | May 18, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Jul 5, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade bpftool | Jun 9, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | May 10, 2023 | Feb 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Jul 22, 2024 | Feb 23, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Apr 6, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade kernel-64kb-develUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-preempt-develUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-debug-baseUpgrade dtb-zteUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-alUpgrade dtb-apmUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-rt | Mar 20, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1151-awsUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.0.0-1012-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-azure-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.4.0-144-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1007-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1061-dell300xUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-4.15.0-206-genericUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.17.0-1028-oemUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.14.0-1058-oemUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-oemUpgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1026-intel-iotg | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub