In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix use-after-free of nreq in reqsk_timer_handler().
The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().
Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout).
Let's pass oreq to reqsk_put().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.176-118.170Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools | Jan 27, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perf-debuginfo | Feb 17, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub