A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-tools-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.162-141.675Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.167-147.601 | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade dtb-zteUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-alUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-sourceUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade dtb-rockchip | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1103-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1036-awsUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-5.4.0-1108-azureUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1026-azureUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.4.0-149-genericUpgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-gkeop | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub