A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perf | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-alUpgrade dtb-apmUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-vanillaUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade dtb-zteUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-preemptUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-allwinner | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1009-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.19.0-1027-awsUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-intelUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1027-lowlatency-64k | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub