In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix use-after-free of nreq in reqsk_timer_handler().
The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().
Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout).
Let's pass oreq to reqsk_put().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools | Jan 27, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.124-134.200Upgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-libbpf-devel | Feb 17, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fips | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub