A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.320-243.544Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.326-245.539Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-headersUpgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.133-86.144 | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-livepatch-6.1.55-75.123Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.49-69.116 | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_105_1 | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-trace-baseUpgrade dtb-xilinxUpgrade kernel-trace-develUpgrade kernel-rt-vdsoUpgrade dtb-zteUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-zfcpdump-manUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-ec2-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-ec2-baseUpgrade dtb-rockchipUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-alUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-xen-develUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-xenUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-ec2Upgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-vanilla-baseUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-xen-baseUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-debug-baseUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-trace | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-starfiveUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1024-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-serverUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-generic-hwe-20.04 | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub