A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation.
When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the incorrect .peek handler of sch_plug and lack of error checking in agg_dequeue().
We recommend upgrading past commit 8fc134fee27f2263988ae38920bc03da416b03d8.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-core | Feb 23, 2024 | Sep 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.192-182.736Upgrade kernelUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-5.10.196-185.743Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.322-244.539Upgrade bpftoolUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-4.14.320-243.544Upgrade python-perfUpgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-4.14.322-246.539 | Oct 6, 2023 | Sep 12, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 12, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.49-69.116Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf | Feb 17, 2025 | Sep 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfo | Mar 13, 2024 | Sep 12, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 12, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Feb 12, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headers | Mar 13, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Sep 12, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 14, 2023 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 8, 2024 | Sep 12, 2023 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-debug-baseUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-alUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-vanillaUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-vanilla-baseUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump-manUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-vanilla-develUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-vanilla-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-azureUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade kernel-64kb | Oct 11, 2023 | Sep 12, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.4.0-1101-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.1.0-1025-oemUpgrade linux-image-6.5.0-10-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-5.4.0-1112-awsUpgrade linux-image-4.4.0-1124-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-gkeUpgrade linux-image-3.13.0-197-genericUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1014-awsUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-serverUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-10-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-219-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1015-azureUpgrade linux-image-6.5.0-1008-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-197-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-5.15.0-87-genericUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-6.5.0-1003-starfiveUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-6.2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-1011-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-6.5.0-10-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-6.2.0-35-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-6.5.0-1005-laptopUpgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1118-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1006-raspiUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1048-awsUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-10-lowlatency-64kUpgrade linux-image-6.5.0-1009-awsUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-1007-oemUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1171-azureUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-6.5.0-1008-azure-fdeUpgrade linux-image-4.4.0-246-genericUpgrade linux-image-6.5.0-1008-azureUpgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-virtual-hwe-22.04 | Oct 23, 2023 | Sep 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub