A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting the underlying structure which can later lead to double freeing the structure. A local attacker user can use this vulnerability to elevate its privileges to root.
We recommend upgrading past commit 8c710f75256bb3cf05ac7b1672c82b92c43f3d28 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/ .
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-devel | Aug 14, 2023 | Apr 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.102-61.139Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perf | May 2, 2023 | Apr 12, 2023 |
| Amazon_linux | — | Upgrade kernel | May 2, 2023 | Mar 20, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.19-30.43Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-4_18_0-477_15_1 | Aug 9, 2023 | Apr 12, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Dell Powerstore Dsa2024158 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jan 29, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel | Mar 13, 2024 | Apr 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 12, 2024 | Apr 12, 2023 |
| Oracle_linux | — | Upgrade kernel | Aug 10, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 9, 2023 | Apr 12, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debug-devel | Mar 5, 2024 | Apr 12, 2023 |
| Suse | — | Upgrade suse-module-tools-legacyUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade suse-module-toolsUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade kernel-docsUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-azure-extra | Jul 11, 2023 | Apr 12, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1118-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1155-awsUpgrade linux-image-5.15.0-1029-ibmUpgrade linux-image-5.4.0-148-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1022-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1139-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-210-genericUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1022-oracleUpgrade linux-image-5.15.0-1034-oracleUpgrade linux-image-5.4.0-1100-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04-edgeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-5.19.0-1024-awsUpgrade linux-image-5.15.0-1028-raspi-nolpaeUpgrade linux-image-5.15.0-71-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1084-raspiUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1107-azureUpgrade linux-image-5.15.0-1033-gcpUpgrade linux-image-5.19.0-1017-raspiUpgrade linux-image-5.4.0-1104-gcpUpgrade linux-image-5.19.0-1017-raspi-nolpaeUpgrade linux-image-5.4.0-1090-kvmUpgrade linux-image-4.15.0-1149-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1037-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1098-gkeUpgrade linux-image-5.4.0-1101-awsUpgrade linux-image-5.15.0-71-lowlatencyUpgrade linux-image-5.19.0-1021-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1023-lowlatencyUpgrade linux-image-4.15.0-210-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1025-azureUpgrade linux-image-5.15.0-1032-kvmUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-148-genericUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1149-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.19.0-41-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1131-raspi2Upgrade linux-image-5.4.0-1048-ibmUpgrade linux-image-4.15.0-1164-azureUpgrade linux-image-raspi2Upgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.19.0-41-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1035-awsUpgrade linux-image-5.4.0-148-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.0.0-1015-oemUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1023-lowlatency-64kUpgrade linux-image-5.15.0-71-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.4.0-1068-gkeopUpgrade linux-image-5.19.0-41-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1028-raspiUpgrade linux-image-5.15.0-1019-gkeopUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1032-gkeUpgrade linux-image-4.4.0-240-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-1022-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1118-awsUpgrade linux-image-4.4.0-1156-awsUpgrade linux-image-4.4.0-240-genericUpgrade linux-image-5.15.0-71-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-210-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1119-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1062-bluefieldUpgrade linux-image-5.15.0-71-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1037-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04-edgeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.15 | Apr 21, 2023 | Apr 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub