A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-core | Aug 14, 2023 | Apr 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-livepatch-4.14.309-231.529 | May 2, 2023 | Apr 12, 2023 |
| Amazon_linux | — | Upgrade kernel | May 2, 2023 | Mar 20, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.19-30.43Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debugsource | Aug 9, 2023 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 29, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libs | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Feb 12, 2024 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 10, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 9, 2023 | Apr 12, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debuginfo | Mar 5, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade dtb-apmUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade suse-module-toolsUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade suse-module-tools-legacyUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azure | Jul 11, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1164-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-4.15.0-1149-snapdragonUpgrade linux-image-5.4.0-148-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-148-generic-lpaeUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1048-ibmUpgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-4.4.0-240-genericUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-4.4.0-240-lowlatencyUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-1119-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-5.4.0-1068-gkeopUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-210-generic-lpaeUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1062-bluefieldUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1131-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.4.0-1100-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-4.15.0-210-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1104-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1098-gkeUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1101-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-210-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-4.15.0-1155-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1139-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1149-gcpUpgrade linux-image-5.4.0-1084-raspiUpgrade linux-image-5.4.0-1107-azureUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.4.0-1090-kvmUpgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1118-oracleUpgrade linux-image-generic-hwe-18.04-edgeUpgrade linux-image-5.4.0-148-lowlatency | Apr 21, 2023 | Apr 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub