A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-devel | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-libbpf-devel | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-preempt-develUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-vanillaUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-symsUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-devel-rtUpgrade dtb-alUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-baseUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-exynos | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.15.0-1040-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-45-genericUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-5.15.0-1038-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1104-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-oemUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-5.19.0-1027-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefield | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub