An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.186-179.751Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.320-243.544Upgrade python-perfUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perfUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfo | Nov 15, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 15, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-vanilla-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade dtb-zteUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-alUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-armUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-optional | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-ibmUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-159-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-serverUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-4.15.0-1169-azureUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azure-cvmUpgrade linux-image-intelUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04 | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub