A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.118-111.515Upgrade kernel-livepatch-4.14.281-212.502Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Sep 7, 2023 | Aug 16, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 21, 2023 | Jun 9, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Feb 17, 2025 | May 14, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Feb 12, 2024 | Aug 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Aug 16, 2023 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 3, 2023 | May 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 16, 2023 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-rt-livepatch-develUpgrade kernel-vanillaUpgrade dtb-amazonUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-vanilla-develUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-baseUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-zteUpgrade kernel-vanilla-base | Sep 15, 2023 | Aug 16, 2023 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1123-awsUpgrade linux-image-4.4.0-245-lowlatencyUpgrade linux-image-4.4.0-1161-awsUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1124-kvmUpgrade linux-image-4.4.0-245-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-kvm | Sep 20, 2023 | Aug 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 29, 2025 | Aug 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub