In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix use-after-free of nreq in reqsk_timer_handler().
The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().
Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout).
Let's pass oreq to reqsk_put().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.15.176-118.170Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf | Jan 27, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-livepatch-6.1.124-134.200Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools | Feb 17, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-awsUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtime | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub