A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-debug-develUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extra | Aug 9, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.313-235.533Upgrade perfUpgrade kernel-livepatch-4.14.314-237.533-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-headersUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.314-237.533Upgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-livepatch-5.10.179-171.711Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.314-238.539-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.313-235.533-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernel-livepatch-5.10.178-162.673-debuginfo | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-50.88Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 10, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_21_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debuginfo | Aug 2, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 1, 2023 | May 10, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 2, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-vanilla-develUpgrade kernel-syms-rtUpgrade kernel-debug-baseUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-zfcpdump-manUpgrade dtb-renesasUpgrade dtb-zteUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-baseUpgrade dtb-socionextUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade kernel-symsUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-vanilla-base | Jul 11, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.1.0-1016-oemUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-155-genericUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-oemUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1122-kvm | Jul 17, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub