A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-64k-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel | Aug 9, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-4.14.313-235.533-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.117-72.142Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-4.14.314-237.533-debuginfoUpgrade kernel-livepatch-4.14.313-235.533Upgrade kernel-livepatch-4.14.314-238.539-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-4.14.314-237.533Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-develUpgrade kernel-livepatch-4.14.314-238.539 | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-livepatch-6.1.25-37.47Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.29-50.88Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Feb 17, 2025 | May 10, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_21_1 | Aug 2, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perf | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 1, 2023 | May 10, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-core | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade dtb-alUpgrade kernel-default-baseUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade dtb-zteUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-debug-baseUpgrade kernel-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-vanilla-baseUpgrade kernel-azure-extraUpgrade kernel-default-vdso | Jul 11, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-6.1.0-1016-oemUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-snapdragonUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-78-generic-lpae | Jul 17, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub