A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.167-147.601Upgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfo | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-alUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-zteUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-64kb | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oemUpgrade linux-image-5.4.0-149-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1026-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-azureUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1108-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1036-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-azureUpgrade linux-image-virtual | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub