A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-doc | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-develUpgrade kernel-livepatch-5.10.196-185.743Upgrade bpftoolUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.186-179.751-debuginfo | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.49-69.116Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_102_1 | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-headersUpgrade python3-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kernel-vanillaUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-traceUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade kernel-vanilla-baseUpgrade kernel-kvmsmall-develUpgrade kernel-xen-develUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-vanilla-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-debug-baseUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-xen-baseUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-xenUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-trace-baseUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-zteUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-ec2-baseUpgrade kernel-default-livepatch-develUpgrade kernel-obs-build | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-serverUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lts-trustyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.1.0-1023-oemUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-nvidia-6.2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-genericUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1014-oracle | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub