A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-headers | Feb 17, 2025 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Oct 19, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-genericUpgrade linux-image-6.1.0-1017-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual | Jul 26, 2023 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub