A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-devel | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.49-69.116Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade dtb-armUpgrade ocfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-alUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade dtb-zteUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-azure-optional | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.4.0-1111-awsUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-raspi2Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-nvidia-6.2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-azureUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oemUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1023-iotUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-1014-lowlatency-64k | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub