A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.
The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.
We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-doc | Jan 18, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.322-244.539 | Oct 4, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-livepatch-6.1.49-69.116Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernel | Jan 10, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 10, 2023 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel | Jan 12, 2024 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 10, 2024 | Sep 6, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvm | Mar 5, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-vanilla-baseUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-kvmsmall-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-vanilla-develUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade dtb-zteUpgrade kernel-preemptUpgrade dtb-alUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-vanillaUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade kernel-devel-azureUpgrade kselftests-kmp-default | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-4.4.0-1162-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-nvidia-6.2Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-raspi2 | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub