A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade perfUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-doc | Jan 18, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.539Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.15.128-80.144Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.186-179.751 | Oct 4, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfo | Jan 10, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 12, 2024 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 10, 2024 | Sep 6, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-core | Mar 5, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-vanillaUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-debug-baseUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade dtb-alUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-zfcpdump-manUpgrade kernel-vanilla-baseUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade dtb-zteUpgrade dtb-marvellUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-64kb | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-starfiveUpgrade linux-image-gcpUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-bluefieldUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-4.15.0-1156-gcp | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub