A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.
The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.
We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-doc | Aug 9, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-4.14.313-235.533Upgrade kernel-develUpgrade kernel-livepatch-4.14.314-238.539-debuginfoUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-4.14.314-238.539Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.314-237.533-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-4.14.314-237.533Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.313-235.533-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.179-168.710-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-166.674 | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.29-50.88Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-livepatch-6.1.34-56.100Upgrade python3-perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfo | Feb 17, 2025 | May 10, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_18_1-debuginfo | Aug 2, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade perf | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 1, 2023 | May 10, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 2, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-preemptUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-vanilla-baseUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-baseUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade dtb-alUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-debug-vdso | Jul 11, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-dell300xUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.1.0-1016-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1106-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-gkeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-snapdragonUpgrade linux-image-gke-5.4Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-243-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-oracle-lts-20.04 | Jul 17, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub