A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-core | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.320-243.544Upgrade python-perfUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade bpftoolUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-4.14.322-244.539 | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-livepatch-6.1.49-69.116Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernelUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-tools-devel | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_105_1 | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perf | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-baseUpgrade dtb-renesasUpgrade kernel-ec2-baseUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-trace-baseUpgrade dtb-armUpgrade kernel-zfcpdump-manUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade dtb-rockchipUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-azure-vdsoUpgrade kernel-trace-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-xen-baseUpgrade kernel-rt-optionalUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-develUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-kvmsmallUpgrade kernel-ec2Upgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-traceUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-preemptUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-xenUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-symsUpgrade dtb-caviumUpgrade dtb-altera | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-starfiveUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-165-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-serverUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1162-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-azure-cvm | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub