A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.320-242.534-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.318-241.531Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-livepatch-5.10.184-175.749-debuginfoUpgrade kernel-livepatch-4.14.318-240.529-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.186-179.751Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.184-174.730-debuginfoUpgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-5.10.184-175.731-debuginfoUpgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-livepatch-5.10.184-175.731Upgrade kernel-livepatch-4.14.318-241.531-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.320-242.534 | Aug 8, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-livepatch-6.1.29-50.88Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.34-58.102Upgrade kernel-debuginfoUpgrade perf | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfo | Oct 11, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade bpftoolUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel | Oct 11, 2023 | Jul 21, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 11, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-alUpgrade kernel-debug-baseUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-baseUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade dtb-zteUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-vanilla-develUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdump-manUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-alteraUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-socionext | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-intelUpgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-82-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-oemUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1043-awsUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-31-genericUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-nvidia-lowlatency | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub