Description
A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | kernel | Fixed in kernel 5.15-rc1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.14.12-1 | — |
| Debian 13 | linux | 5.14.12-1 | — |
| Debian 12 | linux | 5.14.12-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | linux-aws-5.11 +2 | 5.11.0-1023.24~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | 5.11.0-1024.26~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | 5.13.0-23.23~20.04.2 | — |
| Ubuntu 20.04 LTS | linux-oem-5.10 | 5.10.0-1051.53 | — |
| Ubuntu 20.04 LTS | linux-oem-5.13 | 5.13.0-1026.32 | — |
| Ubuntu 20.04 LTS | linux-oem-5.14 | 5.14.0-1007.7 | — |
| Ubuntu 20.04 LTS | linux-riscv +10 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | 5.11.0-1024.25~20.04.1 | — |
| Ubuntu 18.04 LTS | linux-gcp +12 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | kernel-rt +12 | 4.18.0-348.23.1.rt7.153.el8_5 | RHSA-2022:1555 |
| RHEL 8 | kpatch-patch-4_18_0-348 | 1-4.el8 | RHSA-2022:1535 |
| RHEL 8 | kpatch-patch-4_18_0-348_12_2 | 1-2.el8_5 | RHSA-2022:1535 |
| RHEL 8 | kpatch-patch-4_18_0-348_20_1 | 1-1.el8_5 | RHSA-2022:1535 |
| RHEL 8 | kpatch-patch-4_18_0-348_2_1 +1 | 1-3.el8_5 | RHSA-2022:1535 |
| RHEL 8 | perf +26 | 4.18.0-348.23.1.el8_5 | RHSA-2022:1550 |
| RHEL 7 | kernel-rt +10 | 3.10.0-1160.62.1.rt56.1203.el7 | RHSA-2022:1199 |
| RHEL 7 | kpatch-patch-3_10_0-1160_24_1 +1 | 1-8.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_31_1 | 1-7.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_36_2 | 1-6.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_41_1 | 1-5.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_42_2 | 1-4.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_45_1 | 1-3.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_49_1 +1 | 1-2.el7 | RHSA-2022:1185 |
| RHEL 7 | kpatch-patch-3_10_0-1160_59_1 | 1-1.el7 | RHSA-2022:1185 |
| RHEL 7 | perf +18 | 3.10.0-1160.62.1.el7 | RHSA-2022:1198 |
| RHEL 7 | redhat-virtualization-host +1 | 4.3.22-20220330.1.el7_9 | RHSA-2022:1263 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | redhat-virtualization-host +1 | 4.5.0-202205291010_8.6 | RHSA-2022:4896 |
| RHEL 8.4 EUS | kernel-rt +12 | 4.18.0-305.40.1.rt7.112.el8_4 | RHSA-2022:0771 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305 | 1-11.el8 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_10_2 | 1-8.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_12_1 | 1-7.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_17_1 +1 | 1-6.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_25_1 | 1-5.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_28_1 +1 | 1-3.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_34_2 | 1-1.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_3_1 | 1-10.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | kpatch-patch-4_18_0-305_7_1 | 1-9.el8_4 | RHSA-2022:0772 |
| RHEL 8.4 EUS | perf +26 | 4.18.0-305.40.1.el8_4 | RHSA-2022:0777 |
| RHEL 8.2 EUS | kernel-rt +12 | 4.18.0-193.75.1.rt13.125.el8_2 | RHSA-2022:0629 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_46_1 +1 | 1-9.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_51_1 | 1-6.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_56_1 | 1-5.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_60_2 | 1-4.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_64_1 | 1-3.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_65_2 +1 | 1-2.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | kpatch-patch-4_18_0-193_70_1 +1 | 1-1.el8_2 | RHSA-2022:0590 |
| RHEL 8.2 EUS | perf +26 | 4.18.0-193.75.1.el8_2 | RHSA-2022:0636 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_44_1 | 1-10.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_48_1 | 1-7.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_51_1 | 1-6.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_51_2 | 1-5.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_52_1 | 1-4.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_54_2 +1 | 1-3.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_57_1 | 1-2.el8_1 | RHSA-2022:0851 |
| RHEL 8.1 E4S | kpatch-patch-4_18_0-147_58_1 +1 | 1-1.el8_1 | RHSA-2022:0958, RHSA-2022:0851 |
| RHEL 8.1 E4S | perf +18 | 4.18.0-147.64.1.el8_1 | RHSA-2022:0823 |
| RHEL 7.7 TUS | perf +12 | 3.10.0-1062.66.1.el7 | RHSA-2022:1324 |
| RHEL 7.7 E4S | kpatch-patch-3_10_0-1062_49_1 +1 | 1-6.el7 | RHSA-2022:1373 |
| RHEL 7.7 E4S | kpatch-patch-3_10_0-1062_52_2 | 1-5.el7 | RHSA-2022:1373 |
| RHEL 7.7 E4S | kpatch-patch-3_10_0-1062_56_1 | 1-4.el7 | RHSA-2022:1373 |
| RHEL 7.7 E4S | kpatch-patch-3_10_0-1062_59_1 +2 | 1-2.el7 | RHSA-2022:1373 |
| RHEL 7.7 E4S | kpatch-patch-3_10_0-1062_63_1 | 1-1.el7 | RHSA-2022:1373 |
| RHEL 7.7 E4S | perf +14 | 3.10.0-1062.66.1.el7 | RHSA-2022:1324 |
| RHEL 7.7 AUS | perf +12 | 3.10.0-1062.66.1.el7 | RHSA-2022:1324 |
| RHEL 7.6 TUS | perf +12 | 3.10.0-957.94.1.el7 | RHSA-2022:2186 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_72_1 +1 | 1-7.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_78_2 | 1-6.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_80_1 | 1-5.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_84_1 | 1-4.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_86_1 | 1-3.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_88_1 | 1-2.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | kpatch-patch-3_10_0-957_92_1 | 1-1.el7 | RHSA-2022:2211 |
| RHEL 7.6 E4S | perf +13 | 3.10.0-957.94.1.el7 | RHSA-2022:2186 |
| RHEL 7.6 AUS | perf +12 | 3.10.0-957.94.1.el7 | RHSA-2022:2186 |
| RHEL 7.4 AUS | perf +11 | 3.10.0-693.100.1.el7 | RHSA-2022:2188 |
| RHEL 7.3 AUS | perf +11 | 3.10.0-514.101.1.el7 | RHSA-2022:2189 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | kernel-tools-libs-devel | 4.18.0-348.23.1.el8_5 | ALSA-2022:1550 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | kernel | 4.18.0-348.23.1.el8_5 | RLSA-2022:1550 |
| Rocky Linux 8 | kernel-rt | 4.18.0-348.23.1.rt7.153.el8_5 | RLSA-2022:1555 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_0 | 10-3.2 | SUSE-SU-2022:0293-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_1 +2 | 8-150300.2.2 | SUSE-SU-2022:0295-1, SUSE-SU-2022:0257-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_4 | 7-150300.2.2 | SUSE-SU-2022:0257-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_5 | 6-150300.2.2 | SUSE-SU-2022:0257-1 |
| SLE Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_6 +1 | 4-150300.2.2 | SUSE-SU-2022:0270-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | perf +19 | 4.18.0-348.23.1.el8_5 | ELSA-2022-1550 |
| Oracle Linux 7 | perf +12 | 3.10.0-1160.62.1.el7 | ELSA-2022-1198 |
Advisories 33
- ALSA-2022:1550 Important: kernel security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2022:1263 Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22 Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2022:4896 Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update [ovirt-4.5.0] Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2022:1324 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:1373 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0958 Red Hat Security Advisory: kpatch-patch-4_18_0-147_58_1 security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0851 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0823 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0777 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0772 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0771 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0636 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0629 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:0590 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 26, 2026
- RHSA-2022:2211 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:2189 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:2186 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:2188 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1550 Red Hat Security Advisory: kernel security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1555 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1535 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1199 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1185 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:1198 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RLSA-2022:1550 Important: kernel security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- RLSA-2022:1555 Important: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
- SUSE-SU-2022:0295-1 Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0257-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0270-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP3) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0293-1 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3) SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-0515 IBM Spectrum Protect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 8, 2023
- ELSA-2022-1550 Important: kernel security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 27, 2022
- ELSA-2022-1198 Important: kernel security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Apr 6, 2022
References
- https://lkml.org/lkml/2021/10/4/697
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bc0bdc5afaa74
- https://bugzilla.redhat.com/show_bug.cgi?id=2027201
- https://access.redhat.com/security/cve/CVE-2021-4028
- https://bugzilla.suse.com/show_bug.cgi?id=1193167#c0
- https://security.netapp.com/advisory/ntap-20221228-0002/