A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernelUpgrade perfUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelists | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade bpftoolUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade python-perfUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-tools-devel | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfo | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python3-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-xen-baseUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kernel-debug-baseUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-traceUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-kvmsmall-develUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-ec2-develUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-zteUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-rt-vdsoUpgrade kernel-ec2-baseUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-devel-rt | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-serverUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-165-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-lts-trustyUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.2Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1050-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oemUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-1015-kvm | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub