A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642 | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.19-30.43Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-64kb-optionalUpgrade kernel-vanilla-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-vanilla-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-preemptUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-kvmsmall-vdso | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-bluefieldUpgrade linux-image-intelUpgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-genericUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1104-awsUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1027-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-oemUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-75-genericUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1028-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1040-azure | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub