A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-headersUpgrade kernel-livepatch-4.14.281-212.502Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-tools | Sep 7, 2023 | Aug 16, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 21, 2023 | Jun 9, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 14, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headers | Feb 12, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 16, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 3, 2023 | May 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 16, 2023 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-vanillaUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-default-manUpgrade kernel-zfcpdump-manUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-zteUpgrade kselftests-kmp-64kbUpgrade dtb-alUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-vanilla-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-baseUpgrade dtb-caviumUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-debug-baseUpgrade kernel-rt-vdsoUpgrade kernel-default-vdso | Sep 15, 2023 | Aug 16, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1124-kvmUpgrade linux-image-4.4.0-245-genericUpgrade linux-image-4.4.0-1161-awsUpgrade linux-image-4.4.0-245-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1123-aws | Sep 20, 2023 | Aug 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Aug 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub