A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.162-141.675Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.102-61.139 | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.12-17.42Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-sprdUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-rt-extraUpgrade dtb-alUpgrade dtb-amazonUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kb | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1025-awsUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-149-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-gcpUpgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-5.15.0-1036-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.1.0-1008-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-5.4.0-1108-azureUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-bluefield | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub