A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.165-143.735Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-develUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-alUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-zteUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-source-vanilla | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.4.0-1108-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1036-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-42-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1025-awsUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-intelUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-149-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-oemUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-azure | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub