A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642 | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-toolsUpgrade python3-perf-debuginfo | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-zteUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-kvmsmall-baseUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-syms-rtUpgrade kernel-vanilla-develUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-amazonUpgrade kernel-vanillaUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-alUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-renesas | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1104-awsUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-5.19.0-1027-awsUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-75-genericUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-awsUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.19.0-1028-azure | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub