A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernelUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-debug-modules | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.320-242.534-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-4.14.318-240.529-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.318-241.531Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.184-174.730Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-5.10.184-175.749-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.320-243.544Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-livepatch-5.10.184-175.731-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-5.10.184-175.731Upgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-livepatch-5.10.184-174.730-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-livepatch-4.14.318-241.531-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel | Aug 8, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.29-50.88Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.34-58.102Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1 | Oct 11, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-headers | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel | Oct 11, 2023 | Jul 21, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 11, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-baseUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-vanilla-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-vanillaUpgrade dtb-apmUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdump-manUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade dtb-alUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade dtb-zteUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-devel | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oemUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1108-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub