A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, and gain root privileges.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | amazon-linux-2023-upgrade-bpftoolamazon-linux-2023-upgrade-bpftool-debuginfoamazon-linux-2023-upgrade-kernelamazon-linux-2023-upgrade-kernel-debuginfoamazon-linux-2023-upgrade-kernel-debuginfo-common-aarch64amazon-linux-2023-upgrade-kernel-debuginfo-common-x86-64amazon-linux-2023-upgrade-kernel-develamazon-linux-2023-upgrade-kernel-headersamazon-linux-2023-upgrade-kernel-libbpfamazon-linux-2023-upgrade-kernel-libbpf-develamazon-linux-2023-upgrade-kernel-libbpf-staticamazon-linux-2023-upgrade-kernel-livepatch-6-1-34-59-116amazon-linux-2023-upgrade-kernel-toolsamazon-linux-2023-upgrade-kernel-tools-debuginfoamazon-linux-2023-upgrade-kernel-tools-develamazon-linux-2023-upgrade-perfamazon-linux-2023-upgrade-perf-debuginfoamazon-linux-2023-upgrade-python3-perfamazon-linux-2023-upgrade-python3-perf-debuginfo | Feb 17, 2025 | Jul 5, 2023 | |
| Debian | debian-upgrade-linux | Oct 19, 2023 | Jul 11, 2023 | |
| Ubuntu | ubuntu-upgrade-linux-image-6-1-0-1017-oemubuntu-upgrade-linux-image-6-2-0-1006-ibmubuntu-upgrade-linux-image-6-2-0-1008-awsubuntu-upgrade-linux-image-6-2-0-1008-azureubuntu-upgrade-linux-image-6-2-0-1008-oracleubuntu-upgrade-linux-image-6-2-0-1009-kvmubuntu-upgrade-linux-image-6-2-0-1009-lowlatencyubuntu-upgrade-linux-image-6-2-0-1009-lowlatency-64kubuntu-upgrade-linux-image-6-2-0-1009-raspiubuntu-upgrade-linux-image-6-2-0-1010-gcpubuntu-upgrade-linux-image-6-2-0-26-genericubuntu-upgrade-linux-image-6-2-0-26-generic-64kubuntu-upgrade-linux-image-6-2-0-26-generic-lpaeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-oem-22-04cubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-virtual | Jul 26, 2023 | Jul 11, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub