A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules | Aug 14, 2023 | Apr 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.102-61.139Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-livepatch-5.10.173-154.642Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-aarch64 | May 2, 2023 | Apr 12, 2023 |
| Amazon_linux | — | Upgrade kernel | May 2, 2023 | Mar 20, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsource | Aug 9, 2023 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 29, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-tools-libs | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Feb 12, 2024 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 10, 2023 | Apr 20, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 9, 2023 | Apr 12, 2023 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade perf | Mar 5, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade suse-module-tools-legacyUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-symsUpgrade suse-module-toolsUpgrade kernel-rtUpgrade dtb-xilinxUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azure | Jul 11, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1035-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-5.4.0-148-generic-lpaeUpgrade linux-image-4.4.0-240-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-210-generic-lpaeUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-4.15.0-1164-azureUpgrade linux-image-5.4.0-148-genericUpgrade linux-image-4.15.0-1149-snapdragonUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1025-azureUpgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1062-bluefieldUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-240-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-intelUpgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.4.0-1048-ibmUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1119-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-4.15.0-1131-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1068-gkeopUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.19.0-1024-awsUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1139-kvmUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1149-gcpUpgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1098-gkeUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1155-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-5.4.0-1084-raspiUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-5.4.0-1107-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-148-lowlatencyUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-generic-hwe-18.04-edgeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1100-oracleUpgrade linux-image-5.4.0-1104-gcpUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-4.15.0-210-genericUpgrade linux-image-azureUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.4.0-1090-kvmUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-4.15.0-1118-oracleUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-210-lowlatencyUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1101-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-71-generic-lpae | Apr 21, 2023 | Apr 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub