A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents).
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs-devel | Jan 18, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.10.186-179.751Upgrade perfUpgrade python-perfUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.320-243.544Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel | Oct 4, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade bpftool-debuginfo | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfo | Jan 10, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libs | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headers | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 12, 2024 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 10, 2024 | Sep 6, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-vanilla-baseUpgrade kernel-azure-extraUpgrade kernel-zfcpdump-manUpgrade kernel-default-optionalUpgrade kernel-vanilla-develUpgrade kernel-sourceUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-preemptUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-alUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-defaultUpgrade dtb-zteUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-baseUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-devel | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1112-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-aws-hweUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-87-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-1162-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1125-oracle | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub