In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix use-after-free of nreq in reqsk_timer_handler().
The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler().
Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout).
Let's pass oreq to reqsk_put().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.176-118.170Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jan 27, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.115-126.197Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-libbpf-devel | Feb 17, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jan 13, 2025 | Dec 27, 2024 |
| Redhat_linux | — | — | Jul 9, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04 | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub