A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade python3-perf | Jan 18, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-headers | Oct 4, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-devel | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_108_1 | Jan 10, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 12, 2024 | Sep 6, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 10, 2024 | Sep 6, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modules | Mar 5, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-baseUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-vanilla-develUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-vanilla-livepatch-develUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-defaultUpgrade dtb-alUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-zteUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-devel | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.1.0-1023-oemUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1162-awsUpgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-starfiveUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1162-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-aws-hweUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1015-lowlatency | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub