A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade python-perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-tools-develUpgrade perfUpgrade bpftool | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftool | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-default-manUpgrade kernel-vanilla-develUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-zteUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade kernel-source-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade dtb-alUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-xilinx | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-5.19.0-1027-awsUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-azureUpgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1040-azureUpgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-azure-cvm | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub