A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-64kUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernelUpgrade kernel-64k-debug-modules | Sep 15, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.184-175.749-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.318-240.529Upgrade perfUpgrade kernel-livepatch-4.14.318-241.531-debuginfoUpgrade kernel-livepatch-5.10.184-174.730-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-5.10.179-171.711Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.184-175.731Upgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.318-240.529-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.320-242.534-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.184-175.731-debuginfoUpgrade kernel-livepatch-4.14.318-241.531 | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.34-58.102Upgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-livepatch-6.1.29-50.88Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-tools | Feb 17, 2025 | Jul 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kernel-rtUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfo | Sep 13, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 21, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-core | Mar 5, 2024 | Jul 21, 2023 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-vanilla-develUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-zteUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-rtUpgrade kernel-trace-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-alUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-baseUpgrade dlm-kmp-azureUpgrade kernel-trace-baseUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-vanilla-baseUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-xenUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-ec2-develUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-vanillaUpgrade kernel-xen-baseUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-traceUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-ec2Upgrade kernel-azure-vdsoUpgrade kernel-xen-develUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade ocfs2-kmp-rt | Aug 15, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1169-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-intelUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-216-genericUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1114-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-serverUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-virtualUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-244-genericUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-raspiUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub