A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736Upgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.49-69.116Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade python3-perf | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-preemptUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-azureUpgrade kernel-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-zteUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-baseUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-vanilla-develUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatch-develUpgrade dtb-alUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-debug-baseUpgrade gfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade kernel-vanillaUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-default | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-starfiveUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-raspiUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-164-genericUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-intelUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-virtualUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-gke-5.15Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04 | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub