A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.102-61.139Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-vanillaUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-zfcpdump-manUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-alUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rt | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.19.0-1027-awsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-intelUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1022-gkeop | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub