A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-5.10.192-182.736 | Aug 24, 2023 | Aug 7, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Aug 3, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 7, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Aug 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 7, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 3, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 8, 2023 | Aug 7, 2023 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-vanilla-baseUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-vanillaUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rt-vdso | Aug 24, 2023 | Aug 7, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1078-gkeopUpgrade linux-image-5.4.0-1100-kvmUpgrade linux-image-5.4.0-1117-azureUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-5.4.0-1110-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1115-gcpUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.4.0-1058-ibmUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1021-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1111-awsUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-5.4.0-1023-iotUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-164-generic-lpaeUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.4.0-164-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-5.4.0-1095-raspiUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-164-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-starfiveUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1072-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-5.4.0-1031-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04 | Sep 18, 2023 | Aug 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub