An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
The qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.
We recommend upgrading past commit 3e337087c3b5805fe0b8a46ba622a962880b5d64.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade perfUpgrade kernel-cross-headersUpgrade python3-perf | Nov 28, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.320-243.544Upgrade python-perfUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.41-63.109Upgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jul 21, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1 | Nov 15, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 3, 2023 | Jul 21, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 15, 2023 | Jul 21, 2023 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-zfcpdump-manUpgrade kernel-default-livepatch-develUpgrade kernel-vanillaUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-alUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-zteUpgrade dtb-caviumUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-baseUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-default | Aug 4, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azureUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-awsUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1160-awsUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1043-awsUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-82-genericUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1169-azureUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-serverUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-virtual-lts-xenial | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub