A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade perfUpgrade kernel-devel | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-vanilla-baseUpgrade dtb-zteUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-vanillaUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdso | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-34-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1013-awsUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1023-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-starfiveUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-164-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.15.0-1037-nvidia-lowlatency | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub