A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.15.128-80.144Upgrade python-perf | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.49-69.116Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-static | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-baseUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-vanillaUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-alUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-vanilla-develUpgrade kernel-default-optionalUpgrade kernel-vanilla-baseUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-zte | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-virtualUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.4.0-1117-azureUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oemUpgrade linux-image-starfiveUpgrade linux-image-awsUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04 | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub