A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().
We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-core | Feb 23, 2024 | Sep 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-livepatch-4.14.322-246.539Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel | Oct 6, 2023 | Sep 12, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 12, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.49-69.116Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headers | Feb 17, 2025 | Sep 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfo | Mar 13, 2024 | Sep 12, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-headers | Feb 12, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade python3-perf | Mar 13, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 12, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 14, 2023 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 8, 2024 | Sep 12, 2023 |
| Suse | — | Upgrade dtb-alUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-zteUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kernel-debug-baseUpgrade kernel-defaultUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-vanillaUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-vanilla-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-baseUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-zfcpdump-manUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-amdUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-default-vdsoUpgrade kernel-obs-build | Oct 11, 2023 | Sep 12, 2023 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.5.0-10-genericUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-3.13.0-197-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-10-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-3.13.0-197-genericUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1014-awsUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-serverUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-generic-lts-trustyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-165-genericUpgrade linux-image-gcpUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1008-azureUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.5.0-1003-starfiveUpgrade linux-image-nvidia-6.2Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-10-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-6.5.0-1007-oemUpgrade linux-image-6.5.0-1009-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1008-azure-fdeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-10-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.5.0-1005-laptopUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-6.5.0-1006-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-1011-oracleUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-1050-azure-fde | Oct 23, 2023 | Sep 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub