A use-after-free vulnerability in the Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component can be exploited to achieve local privilege escalation.
If a class with a link-sharing curve (i.e. with the HFSC_FSC flag set) has a parent without a link-sharing curve, then init_vf() will call vttree_insert() on the parent, but vttree_remove() will be skipped in update_vf(). This leaves a dangling pointer that can cause a use-after-free.
We recommend upgrading past commit b3d26c5702c7d6c45456326e56d2ccf3f103e60f.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade perf | Feb 23, 2024 | Sep 6, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.10.196-185.743Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.320-243.544Upgrade kernel-livepatch-4.14.322-244.539Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-4.14.322-244.539-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.192-182.736-debuginfoUpgrade kernel-livepatch-5.10.192-183.736-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536-debuginfoUpgrade kernel-livepatch-4.14.320-243.544-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-livepatch-4.14.322-246.539Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.192-183.736Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-livepatch-4.14.322-246.539-debuginfoUpgrade kernel-livepatch-5.15.133-86.144 | Oct 6, 2023 | Sep 6, 2023 |
| Amazon_linux | — | Upgrade kernel | Oct 7, 2023 | Sep 6, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.52-71.125Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.49-70.116Upgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Sep 6, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_108_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_102_1Upgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_102_1-debuginfoUpgrade kernel | Jan 25, 2024 | Sep 6, 2023 |
| Debian | — | Upgrade linux | Oct 23, 2023 | Sep 6, 2023 |
| Dell Powerstore Dsa2024120 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Mar 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-libsUpgrade python-perf | Feb 12, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Mar 13, 2024 | Sep 6, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Sep 6, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Dec 12, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 25, 2024 | Sep 6, 2023 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-baseUpgrade kernel-trace-develUpgrade dtb-xilinxUpgrade kernel-trace-baseUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-zteUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-zfcpdump-manUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-ec2-baseUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-ec2-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-vanillaUpgrade kernel-xenUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-ec2Upgrade ocfs2-kmp-rtUpgrade kernel-vanilla-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-baseUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade kernel-traceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kernel-xen-baseUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kb | Oct 11, 2023 | Sep 6, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1015-kvmUpgrade linux-image-5.15.0-87-lowlatencyUpgrade linux-image-3.13.0-194-lowlatencyUpgrade linux-image-nvidia-6.2Upgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-87-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-246-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1079-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1162-awsUpgrade linux-image-5.15.0-1048-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-4.15.0-1125-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-1125-kvmUpgrade linux-image-6.2.0-1015-lowlatency-64kUpgrade linux-image-4.15.0-1146-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-6.2.0-1015-lowlatencyUpgrade linux-image-5.4.0-1118-azureUpgrade linux-image-4.15.0-1171-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1050-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.2.0-1014-oracleUpgrade linux-image-5.15.0-1039-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-165-generic-lpaeUpgrade linux-image-5.15.0-1041-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.1.0-1023-oemUpgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.2.0-35-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1111-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-gcpUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1050-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1015-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1031-gkeopUpgrade linux-image-4.4.0-246-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-87-generic-lpaeUpgrade linux-image-5.15.0-87-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1041-ibmUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1112-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-6.2.0-1017-gcpUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-165-lowlatencyUpgrade linux-image-5.4.0-1116-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1059-ibmUpgrade linux-image-5.15.0-1046-oracleUpgrade linux-image-5.4.0-1032-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1162-awsUpgrade linux-image-6.2.0-35-generic-lpaeUpgrade linux-image-6.2.0-1007-starfiveUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lts-trustyUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1024-iotUpgrade linux-image-awsUpgrade linux-image-5.15.0-1039-nvidia-lowlatencyUpgrade linux-image-5.4.0-165-genericUpgrade linux-image-5.15.0-1045-kvmUpgrade linux-image-serverUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1014-awsUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1096-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1124-awsUpgrade linux-image-6.2.0-1015-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-3.13.0-194-genericUpgrade linux-image-6.2.0-35-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-219-genericUpgrade linux-image-5.15.0-1045-gkeUpgrade linux-image-4.15.0-1156-gcpUpgrade linux-image-5.15.0-87-generic-64kUpgrade linux-image-4.15.0-219-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1015-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1101-kvm | Oct 6, 2023 | Sep 6, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub