A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses list_entry() on the head of a list causing a type confusion. Local user can trigger this with rds_message_put(). Type confusion leads to `struct rds_msg_zcopy_info *info` actually points to something else that is potentially controlled by local user. It is known how to trigger this, which causes an out of bounds access, and a lock corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.165-143.735Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.162-141.675Upgrade kernel-livepatch-5.10.165-143.735-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.162-141.675-debuginfoUpgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.157-139.675-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-headersUpgrade kernel-livepatch-5.10.167-147.601 | Mar 22, 2023 | Mar 22, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel | Feb 17, 2025 | Feb 7, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Mar 27, 2023 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-alUpgrade kernel-devel-rtUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade kernel-preemptUpgrade dtb-zteUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-armUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-vdso | Mar 29, 2023 | Mar 27, 2023 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1108-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-5.15.0-1038-azureUpgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-5.15.0-1036-awsUpgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-149-genericUpgrade linux-image-gcpUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04c | Apr 10, 2023 | Mar 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub