A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpf-static | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-vanillaUpgrade kernel-vanilla-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-manUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-debug-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-preempt-develUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-baseUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-zteUpgrade dtb-xilinxUpgrade dtb-alUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-vanilla-baseUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-lg | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1111-awsUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-intelUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-nvidia-6.2Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-raspi | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub