An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs | Dec 4, 2023 | Jul 24, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.155-138.670Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.15.79-51.138Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-devel | Aug 8, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-362_8_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-362_13_1-debuginfoUpgrade kpatch-patch-5_14_0-362_8_1Upgrade kpatch-patch-5_14_0-362_13_1-debugsourceUpgrade kpatch-patch-5_14_0-362_8_1-debugsourceUpgrade kpatch-patch-4_18_0-513_5_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-362_13_1Upgrade kpatch-patch-4_18_0-513_5_1-debuginfoUpgrade kpatch-patch-4_18_0-513_5_1-debugsource | Nov 29, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade kernel | Dec 2, 2023 | Oct 22, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 22, 2023 | Jul 24, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-core | Mar 5, 2024 | Jul 24, 2023 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade dtb-apmUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-zfcpdump-manUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-debug-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade dlm-kmp-64kbUpgrade dtb-alUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-zteUpgrade kernel-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-vanilla-baseUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-vanilla-develUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rtUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-64kb | Aug 4, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-gkeop-5.15Upgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-starfiveUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-hwe-5.19Upgrade linux-azure-4.15Upgrade linux-iotUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-oem-6.0Upgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-ibm-5.4Upgrade linux-hweUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-awsUpgrade linux-gcp-5.4 | Nov 19, 2024 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub