A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-5.10.192-182.736Upgrade python-perf-debuginfo | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-devel | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-default-manUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-baseUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-vanillaUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdump-manUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-source-vanilla | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-5.4.0-1111-awsUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1023-iotUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-20.04 | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub