A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.
If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.
We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade rtlaUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade python3-perfUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-core | Sep 15, 2023 | Jul 21, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.184-174.730-debuginfoUpgrade kernel-livepatch-4.14.320-242.534Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.184-175.749-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-4.14.318-241.531-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.179-171.711-debuginfoUpgrade kernel-livepatch-4.14.318-240.529-debuginfoUpgrade kernel-livepatch-5.10.184-175.731Upgrade kernel-livepatch-5.10.184-175.731-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.320-242.534-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-livepatch-4.14.318-241.531Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.179-171.711 | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux | — | Upgrade kernel | Aug 9, 2023 | Jul 21, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.38-59.109Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.29-50.88Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.34-56.100Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.34-59.116Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.34-58.102Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headers | Feb 17, 2025 | Jul 6, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_102_1 | Sep 13, 2023 | Jul 21, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools | Jan 10, 2024 | Jul 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Jul 21, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Sep 15, 2023 | Jul 6, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 13, 2023 | Jul 21, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-devel | Mar 5, 2024 | Jul 21, 2023 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-vanillaUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-traceUpgrade kernel-default-manUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-xen-baseUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-ec2Upgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-preemptUpgrade kernel-xenUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-xen-develUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-ec2-develUpgrade kernel-vanilla-baseUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-trace-baseUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade dtb-alUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dtb-zteUpgrade kernel-defaultUpgrade kernel-trace-devel | Aug 15, 2023 | Jul 21, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-216-genericUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1114-azureUpgrade linux-image-5.4.0-1056-ibmUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-serverUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-4.15.0-1144-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-azure-cvmUpgrade linux-image-6.2.0-31-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1028-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-244-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1122-awsUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1169-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-216-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1043-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-4.4.0-1123-kvmUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-5.4.0-1111-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1107-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1075-gkeopUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1123-oracleUpgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-4.15.0-1160-awsUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-ibmUpgrade linux-image-5.4.0-159-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1070-bluefieldUpgrade linux-image-4.15.0-1154-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.4.0-1160-awsUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-244-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1097-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-5.4.0-159-generic-lpaeUpgrade linux-image-5.4.0-1092-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1010-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1108-awsUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.4.0-159-genericUpgrade linux-image-gke-5.15Upgrade linux-image-awsUpgrade linux-image-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04 | Aug 14, 2023 | Jul 21, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub