An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade perfUpgrade kernel-tools | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.122-77.145 | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.41-63.109Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfo | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernel | Nov 15, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 15, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-alUpgrade dtb-zteUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-vanilla-baseUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-vanilla-develUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-source-rt | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1160-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-159-genericUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-serverUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-4.15.0-1169-azureUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-oracle-lts-20.04 | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub