A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade perf | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.196-185.743Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-develUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.49-69.116 | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfo | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-preempt-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-ec2-baseUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dtb-zteUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade dtb-alUpgrade kernel-ec2-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-xen-develUpgrade kernel-vanilla-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-traceUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-xenUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade dtb-alteraUpgrade kernel-xen-baseUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-debug-livepatch-devel | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.1.0-1023-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1112-awsUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-165-genericUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-serverUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-generic-lts-trustyUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-azure-cvm | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub