An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-doc | Feb 23, 2024 | Jan 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.205-195.807Upgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.205-195.807-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.209-198.812Upgrade bpftoolUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-livepatch-5.10.205-195.804-debuginfoUpgrade kernel-livepatch-5.10.201-191.748 | Feb 7, 2024 | Jan 17, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-livepatch-6.1.72-96.166Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Dec 7, 2023 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 7, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Feb 8, 2024 | Jan 17, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch | Oct 31, 2024 | Jan 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1051-kvmUpgrade linux-image-5.15.0-1057-azureUpgrade linux-image-5.15.0-97-lowlatencyUpgrade linux-image-5.4.0-1086-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-172-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-97-lowlatency-64kUpgrade linux-image-6.5.0-21-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1014-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-97-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-97-genericUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1123-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1052-gcpUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1045-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1037-gkeopUpgrade linux-image-6.1.0-1033-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-6.5.0-21-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1066-ibmUpgrade linux-image-6.5.0-21-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-6.5.0-21-lowlatency-64kUpgrade linux-image-5.15.0-1057-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1045-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1049-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1047-ibmUpgrade linux-image-6.5.0-1008-starfiveUpgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-97-generic-64kUpgrade linux-image-5.4.0-1103-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1047-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1052-oracleUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-5.4.0-1031-iotUpgrade linux-image-5.4.0-172-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1011-raspiUpgrade linux-image-6.5.0-1015-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1051-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1119-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1015-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1118-oracleUpgrade linux-image-5.15.0-1055-awsUpgrade linux-image-6.5.0-1014-awsUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1010-laptopUpgrade linux-image-5.4.0-1124-azureUpgrade linux-image-oem-22.04Upgrade linux-image-starfiveUpgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-172-lowlatencyUpgrade linux-image-5.4.0-1107-kvmUpgrade linux-image-5.4.0-1079-bluefieldUpgrade linux-image-6.5.0-1015-oemUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1038-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1016-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04 | Feb 16, 2024 | Jan 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub