A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade perf | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade python3-perfUpgrade kernel-devel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade dtb-renesasUpgrade kernel-vanilla-develUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-vanilla-baseUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade kernel-kvmsmall-baseUpgrade dtb-alUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-preempt-develUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade reiserfs-kmp-rtUpgrade kernel-debug-baseUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-vanillaUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-vanilla-livepatch-devel | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1117-azureUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-86-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.1.0-1021-oemUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-starfiveUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-164-genericUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1023-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1014-raspi | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub