A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.34-59.116Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Oct 19, 2023 | Jul 11, 2023 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-6.1.0-1017-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpae | Jul 26, 2023 | Jul 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub