An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 5, 2023 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-trace-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-ec2-develUpgrade kernel-zfcpdump-manUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-trace-develUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-xenUpgrade kernel-zfcpdumpUpgrade kernel-vanillaUpgrade kernel-azure-develUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-develUpgrade kernel-debug-baseUpgrade kernel-xen-develUpgrade kernel-azureUpgrade kernel-traceUpgrade kernel-preemptUpgrade kernel-xen-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-vanilla-baseUpgrade dtb-alUpgrade kernel-ec2-baseUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-devel | Jun 15, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1150-snapdragonUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-149-generic-lpaeUpgrade linux-image-5.4.0-1049-ibmUpgrade linux-image-5.15.0-72-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1099-gkeUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-5.4.0-1102-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-ibmUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-4.15.0-1150-gcpUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-4.15.0-211-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-intelUpgrade linux-image-5.19.0-1025-awsUpgrade linux-image-5.4.0-1085-raspiUpgrade linux-image-4.4.0-245-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-211-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-72-genericUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1156-awsUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-1161-awsUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1165-azureUpgrade linux-image-5.15.0-72-generic-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-211-genericUpgrade linux-image-5.4.0-1101-oracleUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-4.4.0-245-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-42-genericUpgrade linux-image-4.15.0-1132-raspi2Upgrade linux-image-5.15.0-1038-azureUpgrade linux-image-5.4.0-1091-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1020-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1033-gkeUpgrade linux-image-5.15.0-72-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-149-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1035-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1029-raspiUpgrade linux-image-5.4.0-1069-gkeopUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1105-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1033-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1140-kvmUpgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1038-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.15.0-1029-raspi-nolpaeUpgrade linux-image-5.4.0-149-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1119-oracleUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1034-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-72-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1124-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1108-azureUpgrade linux-image-5.15.0-1036-awsUpgrade linux-image-bluefield | May 17, 2023 | May 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub