A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-64k-debugUpgrade perfUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-docUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-64k-modules-core | Sep 15, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.10.184-175.749-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.318-241.531-debuginfoUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-livepatch-5.10.184-174.730-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-livepatch-5.10.184-175.731Upgrade kernel-livepatch-4.14.318-240.529-debuginfoUpgrade kernel-livepatch-4.14.320-242.534-debuginfoUpgrade kernel-livepatch-5.10.184-175.731-debuginfoUpgrade kernel-livepatch-5.10.179-171.711Upgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.318-241.531Upgrade python-perfUpgrade kernel-livepatch-4.14.320-243.544Upgrade bpftool | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.29-50.88Upgrade kernel-livepatch-6.1.38-59.109Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-6.1.34-58.102Upgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf | Feb 17, 2025 | Jul 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfo | Sep 13, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Sep 15, 2023 | Jul 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 21, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug | Mar 5, 2024 | Jul 21, 2023 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-trace-baseUpgrade dtb-rockchipUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-livepatch-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade dtb-alUpgrade kernel-obs-buildUpgrade kernel-vanilla-develUpgrade kernel-zfcpdump-manUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade dtb-appleUpgrade kernel-xenUpgrade kernel-ec2Upgrade dtb-hisiliconUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-traceUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade kernel-xen-develUpgrade kernel-azure-baseUpgrade kernel-vanilla-baseUpgrade kernel-azure-vdsoUpgrade kernel-ec2-devel | Aug 15, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1043-awsUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1169-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1122-awsUpgrade linux-image-genericUpgrade linux-image-serverUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-82-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1045-azureUpgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-intelUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1010-azureUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1108-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-244-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1160-awsUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-5.4.0-1070-bluefield | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub