A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extra | Aug 14, 2023 | Apr 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.309-231.529Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 2, 2023 | Apr 12, 2023 |
| Amazon_linux | — | Upgrade kernel | May 2, 2023 | Mar 20, 2023 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftool | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kernelUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_13_1-debuginfo | Aug 9, 2023 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 29, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade kernel | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Feb 12, 2024 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 10, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 9, 2023 | Apr 12, 2023 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfo | Mar 5, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-devel-azureUpgrade suse-module-toolsUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade suse-module-tools-legacyUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-extra | Jul 11, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1101-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1104-gcpUpgrade linux-image-5.4.0-1090-kvmUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-4.15.0-210-genericUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-5.4.0-1107-azureUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1100-oracleUpgrade linux-image-generic-hwe-18.04-edgeUpgrade linux-image-4.15.0-210-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-4.15.0-1139-kvmUpgrade linux-image-5.4.0-1098-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1155-awsUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-148-lowlatencyUpgrade linux-image-5.4.0-1084-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1037-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1149-gcpUpgrade linux-image-4.15.0-1118-oracleUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-240-lowlatencyUpgrade linux-image-4.15.0-1131-raspi2Upgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-148-genericUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1149-snapdragonUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1119-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gke-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-148-generic-lpaeUpgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-71-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-210-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.4.0-1068-gkeopUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-4.4.0-1118-awsUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-4.4.0-240-genericUpgrade linux-image-genericUpgrade linux-image-5.4.0-1048-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1035-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1062-bluefieldUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1164-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-41-genericUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-oem-22.04 | Apr 21, 2023 | Apr 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub