A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAP_NET_ADMIN, it may not always be the case, e.g., a non-root user only having that capability. This would make tun/tap sockets being incorrectly treated in filtering/routing decisions, possibly bypassing network filters.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headers | Jul 9, 2024 | Mar 27, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 4, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | May 18, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Jul 5, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jun 9, 2023 | Mar 27, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | May 10, 2023 | Mar 27, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Feb 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-kvmsmall-baseUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-zteUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade kernel-vanillaUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-vanilla-baseUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-caviumUpgrade dtb-apmUpgrade dtb-alUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-exynos | Mar 20, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-152-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1103-oracleUpgrade linux-image-5.19.0-1028-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1040-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1033-intel-iotgUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1021-raspiUpgrade linux-image-5.15.0-75-genericUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1065-bluefieldUpgrade linux-image-5.19.0-45-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-45-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.19.0-1021-raspi-nolpaeUpgrade linux-image-5.15.0-1022-gkeopUpgrade linux-image-kvmUpgrade linux-image-5.15.0-75-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1107-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1025-oracleUpgrade linux-image-5.15.0-1037-oracleUpgrade linux-image-5.4.0-1093-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1024-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1036-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1025-kvmUpgrade linux-image-5.4.0-1102-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1110-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1038-awsUpgrade linux-image-5.19.0-1027-awsUpgrade linux-image-5.19.0-1027-lowlatency-64kUpgrade linux-image-5.19.0-1027-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-152-genericUpgrade linux-image-5.15.0-75-generic-64kUpgrade linux-image-5.19.0-1026-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1104-awsUpgrade linux-image-gke-5.4Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-45-generic-64kUpgrade linux-image-5.4.0-152-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-75-lowlatency-64kUpgrade linux-image-5.15.0-1035-kvmUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1032-raspi-nolpaeUpgrade linux-image-5.15.0-1036-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1032-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1032-ibmUpgrade linux-image-5.4.0-1051-ibmUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-75-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1040-azure-fdeUpgrade linux-image-5.4.0-1088-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-5.15.0-1041-azure-fdeUpgrade linux-image-5.4.0-1071-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4 | Apr 21, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub