A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernelUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelists | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-5.10.192-182.736 | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.52-71.125Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-livepatch-6.1.49-70.116Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-tools-debuginfoUpgrade perf-debuginfo | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_102_1 | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-vanillaUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-xen-baseUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-vanilla-baseUpgrade kernel-vanilla-develUpgrade dtb-freescaleUpgrade kernel-debug-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-xenUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade kernel-traceUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-xen-develUpgrade dtb-amlogicUpgrade kernel-ec2Upgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-alUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-kvmsmall-baseUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-trace-baseUpgrade kernel-rt-vdsoUpgrade dtb-zteUpgrade dtb-xilinxUpgrade kernel-trace-develUpgrade kernel-source-vanilla | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-oemUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-oem-osp1Upgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04cUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1162-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.4.0-1024-iotUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-serverUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lts-trustyUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-5.4.0-1112-aws | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub