The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c. This issue was introduced in da214a475f8bd1d3e9e7a19ddfeb4d1617551bab and fixed in 649c15c7691e9b13cbe9bf6c65c365350e056067.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfo | Feb 17, 2025 | Mar 13, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.0.0-1013-oemUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1020-oracleUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1023-azureUpgrade linux-image-5.19.0-1023-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1022-lowlatency-64kUpgrade linux-image-5.19.0-40-generic-lpaeUpgrade linux-image-5.19.0-1016-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-40-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1021-kvmUpgrade linux-image-5.19.0-40-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1016-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1020-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1022-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub