An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-doc | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-develUpgrade kernelUpgrade kernel-tools | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernelUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfo | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_99_1 | Nov 15, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 15, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-vanilla-develUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-rt-develUpgrade dtb-zteUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-alUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-vanilla-baseUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-kvmsmall-baseUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-preemptUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kb | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-serverUpgrade linux-image-generic-lts-trustyUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-4.15.0-1169-azureUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-genericUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-82-genericUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-starfiveUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-gcpUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-raspi2Upgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1040-kvm | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub