Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2023-3776 EUVD-2023-44409GHSA-fcg7-9x44-gx43

Use-after-free in Linux kernel's net/sched: cls_fw component

Published Jul 21, 2023 · Updated Mar 5, 2025 · Assigned by Google

Vendor: Linux Product: kernel Package: kernel Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.2 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-starfive-5.19 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation.

If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.

We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.

Affected products

VendorProductAffectedFixed
Linux Kernel 2.6 – < 6.5 6.5

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.4.4-2 —
Debian 13 linux 6.4.4-2 —
Debian 12 linux 6.1.52-1 DSA-5492-1
Debian 11 linux 5.10.191-1 DSA-5480-1
Debian 10 linux 4.19.304-1 DLA-3710-1
Debian 10 linux-5.10 5.10.197-1~deb10u1 DLA-3623-1
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1022.24 —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux +1 5.15.0-82.91 USN-6315-1
Ubuntu 22.04 LTS linux-aws 5.15.0-1043.48 USN-6315-1
Ubuntu 22.04 LTS linux-aws-6.2 6.2.0-1010.10~22.04.1 USN-6318-1
Ubuntu 22.04 LTS linux-azure 5.15.0-1045.52 USN-6332-1
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1045.52.1 USN-6332-1
Ubuntu 22.04 LTS linux-gcp 5.15.0-1040.48 USN-6315-1
Ubuntu 22.04 LTS linux-gke +1 5.15.0-1040.45 USN-6315-1
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1026.31 USN-6315-1
Ubuntu 22.04 LTS linux-hwe-6.2 6.2.0-31.31~22.04.1 USN-6318-1
Ubuntu 22.04 LTS linux-ibm +1 5.15.0-1036.39 USN-6348-1, USN-6315-1
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1038.43 USN-6325-1
Ubuntu 22.04 LTS linux-lowlatency-hwe-6.2 6.2.0-1011.11~22.04.1 USN-6318-1
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1031.31 USN-6315-1
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1017.17 —
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1004.4 —
Ubuntu 22.04 LTS linux-oem-6.0 6.0.0-1021.21 USN-6385-1
Ubuntu 22.04 LTS linux-oem-6.1 6.1.0-1019.19 USN-6285-1
Ubuntu 22.04 LTS linux-oracle 5.15.0-1041.47 USN-6315-1
Ubuntu 22.04 LTS linux-riscv +15 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1025.29 —
Ubuntu 20.04 LTS linux 5.4.0-159.176 USN-6317-1
Ubuntu 20.04 LTS linux-aws 5.4.0-1108.116 USN-6317-1
Ubuntu 20.04 LTS linux-aws-5.15 5.15.0-1043.48~20.04.1 USN-6315-1
Ubuntu 20.04 LTS linux-azure 5.4.0-1114.120 USN-6331-1
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1045.52~20.04.1 USN-6332-1
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1070.76 USN-6397-1
Ubuntu 20.04 LTS linux-gcp 5.4.0-1111.120 USN-6317-1
Ubuntu 20.04 LTS linux-gcp-5.15 5.15.0-1040.48~20.04.1 USN-6330-1
Ubuntu 20.04 LTS linux-gke +26 No fix yet —
Ubuntu 20.04 LTS linux-gkeop 5.4.0-1075.79 USN-6324-1
Ubuntu 20.04 LTS linux-gkeop-5.15 5.15.0-1026.31~20.04.1 USN-6325-1
Ubuntu 20.04 LTS linux-hwe-5.15 +1 5.15.0-82.91~20.04.1 USN-6315-1
Ubuntu 20.04 LTS linux-ibm 5.4.0-1056.61 USN-6357-1
Ubuntu 20.04 LTS linux-ibm-5.15 5.15.0-1036.39~20.04.1 —
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1038.43~20.04.1 USN-6348-1
Ubuntu 20.04 LTS linux-iot 5.4.0-1021.22 —
Ubuntu 20.04 LTS linux-kvm 5.4.0-1097.103 USN-6317-1
Ubuntu 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1017.17~20.04.1 —
Ubuntu 20.04 LTS linux-oracle 5.4.0-1107.116 USN-6317-1
Ubuntu 20.04 LTS linux-oracle-5.15 5.15.0-1041.47~20.04.1 USN-6315-1
Ubuntu 20.04 LTS linux-raspi 5.4.0-1092.103 USN-6346-1
Ubuntu 20.04 LTS linux-riscv-5.15 5.15.0-1039.43~20.04.2 —
Ubuntu 20.04 LTS linux-xilinx-zynqmp 5.4.0-1028.32 USN-6317-1
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Show 14 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1037.39 —
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1044.49 —
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1108.116+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1114.120+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1083.92 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1111.120+fips1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2099.105 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2078.84 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1115.126 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-gcp-fips 4.15.0-2062.67 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1092.99 —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips No fix yet —
Ubuntu Pro 22.04 LTS linux 5.15.0-84.93 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-aws 5.15.0-1045.50 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-aws-6.2 +1 6.2.0-1012.12~22.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-azure 5.15.0-1047.54 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-gcp 5.15.0-1042.50 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-gcp-6.2 6.2.0-1014.14~22.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-gke 5.15.0-1042.47 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-hwe-6.2 6.2.0-33.33~22.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 22.04 LTS linux-ibm 5.15.0-1038.41 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux 5.4.0-165.182 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-aws 5.4.0-1112.121 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-aws-5.15 5.15.0-1045.50~20.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-azure 5.4.0-1118.125 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-gcp 5.4.0-1116.125 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-gcp-5.15 5.15.0-1042.50~20.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-gke 5.4.0-1100.107 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-gke-5.15 5.15.0-1034.39~20.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-gkeop 5.4.0-1077.81 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-hwe-5.15 +1 5.15.0-84.93~20.04.1 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-ibm 5.4.0-1059.64 LSN-0099-1, LSN-0098-1
Ubuntu Pro 20.04 LTS linux-ibm-5.15 5.15.0-1041.44~20.04.1 LSN-0099-1
Ubuntu Pro 18.04 LTS linux 4.15.0-216.227 USN-6342-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 18.04 LTS linux-aws 4.15.0-1160.173 USN-6342-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 18.04 LTS linux-aws-5.4 5.4.0-1108.116~18.04.1 USN-6317-1, LSN-0099-1
Ubuntu Pro 18.04 LTS linux-azure-4.15 4.15.0-1169.184 USN-6342-2, LSN-0099-1, LSN-0098-1
Ubuntu Pro 18.04 LTS linux-azure-5.4 5.4.0-1115.122~18.04.1 LSN-0099-1
Ubuntu Pro 18.04 LTS linux-gcp-4.15 4.15.0-1154.171 USN-6342-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 18.04 LTS linux-gcp-5.4 5.4.0-1111.120~18.04.1 USN-6329-1, LSN-0099-1
Ubuntu Pro 18.04 LTS linux-hwe-5.4 5.4.0-159.176~18.04.1 USN-6317-1, LSN-0099-1
Ubuntu Pro 18.04 LTS linux-ibm-5.4 5.4.0-1056.61~18.04.1 USN-6357-1, LSN-0099-1
Ubuntu Pro 18.04 LTS linux-kvm 4.15.0-1144.149 USN-6342-1
Ubuntu Pro 18.04 LTS linux-oracle 4.15.0-1123.134 USN-6342-1
Ubuntu Pro 18.04 LTS linux-oracle-5.4 5.4.0-1107.116~18.04.1 USN-6329-1
Ubuntu Pro 18.04 LTS linux-raspi-5.4 5.4.0-1092.103~18.04.1 USN-6346-1
Ubuntu Pro 16.04 LTS linux 4.4.0-244.278 USN-6309-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 16.04 LTS linux-aws 4.4.0-1160.175 USN-6309-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1160.173~16.04.1 USN-6342-1, LSN-0099-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1169.184~16.04.1 USN-6342-2, LSN-0099-1, LSN-0098-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1154.171~16.04.1 USN-6342-1, LSN-0099-1, LSN-0098-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-216.227~16.04.1 USN-6342-1, LSN-0099-1
Ubuntu Pro 16.04 LTS linux-kvm 4.4.0-1123.133 USN-6327-1
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1123.134~16.04.1 USN-6342-1
Ubuntu Pro 14.04 LTS linux 3.13.0-193.244 USN-6341-1
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1122.128 USN-6309-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1169.184~14.04.1 USN-6342-2
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-244.278~14.04.1 USN-6309-1, LSN-0099-1, LSN-0098-1
ReleasePackageFixed inAdvisory
RHEL 9 bpftool 7.0.0-284.30.1.el9_2 RHSA-2023:5069
RHEL 9 kernel-rt +14 5.14.0-284.30.1.rt14.315.el9_2 RHSA-2023:5091
RHEL 9 kpatch-patch-5_14_0-284_11_1 1-5.el9_2 RHSA-2023:5093
RHEL 9 kpatch-patch-5_14_0-284_18_1 1-4.el9_2 RHSA-2023:5093
RHEL 9 kpatch-patch-5_14_0-284_25_1 1-3.el9_2 RHSA-2023:5093
RHEL 9 perf +48 5.14.0-284.30.1.el9_2 RHSA-2023:5069
RHEL 8 kernel-rt +12 4.18.0-477.27.1.rt7.290.el8_8 RHSA-2023:5255
RHEL 8 kpatch-patch-4_18_0-477_10_1 1-3.el8_8 RHSA-2023:5221
RHEL 8 kpatch-patch-4_18_0-477_13_1 +1 1-2.el8_8 RHSA-2023:5221
RHEL 8 kpatch-patch-4_18_0-477_21_1 1-1.el8_8 RHSA-2023:5221
RHEL 8 perf +26 4.18.0-477.27.1.el8_8 RHSA-2023:5244
RHEL 7 kernel-rt +10 3.10.0-1160.105.1.rt56.1256.el7 RHSA-2023:7424
RHEL 7 kpatch-patch-3_10_0-1160_102_1 1-1.el7 RHSA-2023:7419
RHEL 7 kpatch-patch-3_10_0-1160_90_1 +1 1-4.el7 RHSA-2023:7419
RHEL 7 kpatch-patch-3_10_0-1160_95_1 1-3.el7 RHSA-2023:7419
RHEL 7 kpatch-patch-3_10_0-1160_99_1 1-2.el7 RHSA-2023:7419
RHEL 7 perf +18 3.10.0-1160.105.1.el7 RHSA-2023:7423
Show 13 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhev Hypervisor 4 perf +2 4.18.0-372.80.1.el8_6 RHSA-2023:7398
RHEL 9.0 EUS kernel-rt +12 5.14.0-70.80.1.rt21.151.el9_0 RHSA-2023:7389
RHEL 9.0 EUS kpatch-patch-5_14_0-70_53_1 1-5.el9_0 RHSA-2023:7411
RHEL 9.0 EUS kpatch-patch-5_14_0-70_58_1 1-4.el9_0 RHSA-2023:7411
RHEL 9.0 EUS kpatch-patch-5_14_0-70_64_1 1-3.el9_0 RHSA-2023:7411
RHEL 9.0 EUS kpatch-patch-5_14_0-70_70_1 1-2.el9_0 RHSA-2023:7411
RHEL 9.0 EUS kpatch-patch-5_14_0-70_75_1 1-1.el9_0 RHSA-2023:7411
RHEL 9.0 EUS perf +29 5.14.0-70.80.1.el9_0 RHSA-2023:7382
RHEL 8.6 EUS kpatch-patch-4_18_0-372_52_1 1-5.el8_6 RHSA-2023:7410
RHEL 8.6 EUS kpatch-patch-4_18_0-372_57_1 1-4.el8_6 RHSA-2023:7410
RHEL 8.6 EUS kpatch-patch-4_18_0-372_64_1 1-3.el8_6 RHSA-2023:7410
RHEL 8.6 EUS kpatch-patch-4_18_0-372_70_1 1-2.el8_6 RHSA-2023:7410
RHEL 8.6 EUS kpatch-patch-4_18_0-372_75_1 1-1.el8_6 RHSA-2023:7410
RHEL 8.6 EUS perf +26 4.18.0-372.80.1.el8_6 RHSA-2023:7398
RHEL 8.4 TUS kernel-rt +12 4.18.0-305.108.1.rt7.183.el8_4 RHSA-2023:5794
RHEL 8.4 TUS perf +17 4.18.0-305.108.1.el8_4 RHSA-2023:5628
RHEL 8.4 E4S kpatch-patch-4_18_0-305_103_1 1-1.el8_4 RHSA-2023:5775
RHEL 8.4 E4S kpatch-patch-4_18_0-305_82_1 1-5.el8_4 RHSA-2023:5775
RHEL 8.4 E4S kpatch-patch-4_18_0-305_86_2 +1 1-4.el8_4 RHSA-2023:5775
RHEL 8.4 E4S kpatch-patch-4_18_0-305_91_1 1-3.el8_4 RHSA-2023:5775
RHEL 8.4 E4S kpatch-patch-4_18_0-305_97_1 1-2.el8_4 RHSA-2023:5775
RHEL 8.4 E4S perf +25 4.18.0-305.108.1.el8_4 RHSA-2023:5628
RHEL 8.4 AUS perf +17 4.18.0-305.108.1.el8_4 RHSA-2023:5628
RHEL 8.2 TUS kernel-rt +12 4.18.0-193.119.1.rt13.170.el8_2 RHSA-2023:7431
RHEL 8.2 TUS perf +17 4.18.0-193.119.1.el8_2 RHSA-2023:7434
RHEL 8.2 E4S kpatch-patch-4_18_0-193_109_1 1-3.el8_2 RHSA-2023:7417
RHEL 8.2 E4S kpatch-patch-4_18_0-193_113_1 1-2.el8_2 RHSA-2023:7417
RHEL 8.2 E4S kpatch-patch-4_18_0-193_116_1 1-1.el8_2 RHSA-2023:7417
RHEL 8.2 E4S perf +18 4.18.0-193.119.1.el8_2 RHSA-2023:7434
RHEL 8.2 AUS perf +17 4.18.0-193.119.1.el8_2 RHSA-2023:7434
RHEL 8.1 E4S kpatch-patch-4_18_0-147_83_1 1-5.el8_1 RHSA-2023:6799
RHEL 8.1 E4S kpatch-patch-4_18_0-147_85_1 1-3.el8_1 RHSA-2023:6799
RHEL 8.1 E4S kpatch-patch-4_18_0-147_87_1 1-2.el8_1 RHSA-2023:6799
RHEL 8.1 E4S kpatch-patch-4_18_0-147_90_1 1-1.el8_1 RHSA-2023:6799
RHEL 8.1 E4S perf +18 4.18.0-147.94.1.el8_1 RHSA-2023:6813
RHEL 7.7 AUS perf +12 3.10.0-1062.82.1.el7 RHSA-2024:0262
RHEL 7.6 AUS perf +12 3.10.0-957.108.1.el7 RHSA-2023:7294
RHEL 6 ELS perf +13 2.6.32-754.53.1.el6 RHSA-2024:1831

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 bpftool 7.0.0-284.30.1.el9_2 ALSA-2023:5069
AlmaLinux 9 kernel-rt +13 5.14.0-284.30.1.rt14.315.el9_2 ALSA-2023:5091
AlmaLinux 9 perf +43 5.14.0-284.30.1.el9_2 ALSA-2023:5069
AlmaLinux 8 perf +24 4.18.0-477.27.2.el8_8 ALSA-2023:5244

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 kernel-rt 5.14.0-284.30.1.rt14.315.el9_2 RLSA-2023:5091
Rocky Linux 8 kernel 4.18.0-477.27.1.el8_8 RXSA-2023:5244, RLSA-2023:5244
ReleasePackageFixed inAdvisory
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.19.1 SUSE-SU-2023:3311-1
SLES 15 SP5 kernel-azure +2 5.14.21-150500.33.14.1 SUSE-SU-2023:3376-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.19.1.150500.6.6.4 SUSE-SU-2023:3311-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
SLES 15 SP4 kernel-azure +2 5.14.21-150400.14.63.1 SUSE-SU-2023:3377-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
SLES 15 SP3 kernel-64kb +7 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLES 15 SP3 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SLES 15 SP2 kernel-default +2 5.3.18-150200.24.160.2 SUSE-SU-2023:3390-1
SLES 15 SP2 kernel-default-base 5.3.18-150200.24.160.2.150200.9.79.2 SUSE-SU-2023:3390-1
SLES 15 SP2 kernel-docs 5.3.18-150200.24.160.3 SUSE-SU-2023:3390-1
SLES 15 SP2 kernel-syms +1 5.3.18-150200.24.160.1 SUSE-SU-2023:3390-1
SLES 15 SP1 kernel-docs +5 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1
Show 26 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 kernel-azure +2 4.12.14-16.146.1 SUSE-SU-2023:3349-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.173.1 SUSE-SU-2023:3309-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.208.1 SUSE-SU-2023:3324-1
SLES 11 SP4 kernel-ec2 +5 3.0.101-108.144.1 SUSE-SU-2023:3333-1
SLES for SAP 15 SP3 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SLES for SAP 15 SP3 kernel-docs +5 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLES for SAP 15 SP2 kernel-default +2 5.3.18-150200.24.160.2 SUSE-SU-2023:3390-1
SLES for SAP 15 SP2 kernel-default-base 5.3.18-150200.24.160.2.150200.9.79.2 SUSE-SU-2023:3390-1
SLES for SAP 15 SP2 kernel-docs 5.3.18-150200.24.160.3 SUSE-SU-2023:3390-1
SLES for SAP 15 SP2 kernel-syms +1 5.3.18-150200.24.160.1 SUSE-SU-2023:3390-1
SLES for SAP 15 SP1 kernel-docs +4 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.146.1 SUSE-SU-2023:3349-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.173.1 SUSE-SU-2023:3309-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.138.1 SUSE-SU-2023:3329-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
SLE Micro 5.4 kernel-rt 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
SLE Micro 5.3 kernel-rt 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1
SLE Micro 5.2 kernel-default 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLE Micro 5.2 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SLE Micro 5.2 kernel-rt 5.3.18-150300.138.3 SUSE-SU-2023:3421-1
SLE Micro 5.1 kernel-default 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLE Micro 5.1 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SLE Micro 5.1 kernel-rt 5.3.18-150300.138.3 SUSE-SU-2023:3421-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.19.1 SUSE-SU-2023:3311-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5-RT_Update_3 1-150500.11.5.1 SUSE-SU-2023:3302-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_0 +1 4-150500.9.2 SUSE-SU-2023:3928-1, SUSE-SU-2023:3772-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_1 +2 3-150500.2.1 SUSE-SU-2023:3924-1, SUSE-SU-2023:3923-1, SUSE-SU-2023:3784-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_3 1-150500.11.3.4 SUSE-SU-2023:3311-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_1 10-150400.2.2 SUSE-SU-2023:3772-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_11 1-150400.1.5.1 SUSE-SU-2023:3318-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4-RT_Update_6 6-150400.2.1 SUSE-SU-2023:3783-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_13 4-150400.2.1 SUSE-SU-2023:3922-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_14 +3 3-150400.2.1 SUSE-SU-2023:3924-1, SUSE-SU-2023:3923-1, SUSE-SU-2023:3784-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_16 1-150400.9.3.3 SUSE-SU-2023:3313-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_3 14-150400.2.2 SUSE-SU-2023:3928-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_23 15-150300.2.2 SUSE-SU-2023:3892-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_30 7-150300.2.1 SUSE-SU-2023:3928-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_35 1-150300.7.3.1 SUSE-SU-2023:3391-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-150200.24.160.2 SUSE-SU-2023:3390-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_30 +1 12-150200.2.2 SUSE-SU-2023:3812-1, SUSE-SU-2023:3788-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_32 9-150200.2.2 SUSE-SU-2023:3893-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_33 8-150200.2.2 SUSE-SU-2023:3844-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_34 7-150200.2.1 SUSE-SU-2023:3846-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_37 4-150200.2.1 SUSE-SU-2023:3889-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_39 1-150200.5.3.2 SUSE-SU-2023:3390-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_34 +1 11-150100.2.2 SUSE-SU-2023:3786-1, SUSE-SU-2023:3768-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_40 6-150100.2.1 SUSE-SU-2023:3838-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_41 4-150100.2.1 SUSE-SU-2023:3809-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_43 1-150100.3.3.1 SUSE-SU-2023:3392-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.173.1 SUSE-SU-2023:3309-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_35 12-2.2 SUSE-SU-2023:3749-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_47 1-8.3.3 SUSE-SU-2023:3309-1
SLE HPC 15 SP3 kernel-64kb +6 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SLE HPC 15 SP3 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SLE HPC 15 SP2 kernel-default +2 5.3.18-150200.24.160.2 SUSE-SU-2023:3390-1
SLE HPC 15 SP2 kernel-default-base 5.3.18-150200.24.160.2.150200.9.79.2 SUSE-SU-2023:3390-1
SLE HPC 15 SP2 kernel-docs 5.3.18-150200.24.160.3 SUSE-SU-2023:3390-1
SLE HPC 15 SP2 kernel-syms +1 5.3.18-150200.24.160.1 SUSE-SU-2023:3390-1
SLE HPC 15 SP1 kernel-docs +4 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1
SUSE Real Time Module 15 SP5 kernel-rt +3 5.14.21-150500.13.11.1 SUSE-SU-2023:3302-1
SUSE Real Time Module 15 SP4 kernel-rt +3 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1
SUSE Manager Server 4.2 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SUSE Manager Server 4.2 kernel-source +3 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SUSE Manager Proxy 4.2 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
SUSE Manager Proxy 4.2 kernel-source +2 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SUSE Enterprise Storage 7.1 kernel-64kb +6 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1
SUSE Enterprise Storage 7.1 kernel-default-base 5.3.18-150300.59.130.1.150300.18.76.1 SUSE-SU-2023:3391-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.5 dtb-aarch64 +10 5.14.21-150500.55.19.1 SUSE-SU-2023:3311-1
openSUSE Leap 15.5 kernel-azure +2 5.14.21-150500.33.14.1 SUSE-SU-2023:3376-1
openSUSE Leap 15.5 kernel-default-base 5.14.21-150500.55.19.1.150500.6.6.4 SUSE-SU-2023:3311-1
openSUSE Leap 15.5 kernel-rt +3 5.14.21-150500.13.11.1 SUSE-SU-2023:3302-1
openSUSE Leap 15.5 kernel-vanilla 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1
openSUSE Leap 15.4 dtb-aarch64 5.3.18-150300.59.130.1 SUSE-SU-2023:3391-1, SUSE-SU-2023:3313-1
openSUSE Leap 15.4 kernel-64kb +5 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
openSUSE Leap 15.4 kernel-azure +2 5.14.21-150400.14.63.1 SUSE-SU-2023:3377-1
openSUSE Leap 15.4 kernel-debug +4 4.12.14-150100.197.154.1 SUSE-SU-2023:3392-1, SUSE-SU-2023:3313-1
openSUSE Leap 15.4 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
openSUSE Leap 15.4 kernel-rt +3 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.4 kernel-default 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
openSUSE Leap Micro 5.4 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
openSUSE Leap Micro 5.4 kernel-rt 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1
openSUSE Leap Micro 5.3 kernel-default 5.14.21-150400.24.81.1 SUSE-SU-2023:3313-1
openSUSE Leap Micro 5.3 kernel-default-base 5.14.21-150400.24.81.1.150400.24.35.3 SUSE-SU-2023:3313-1
openSUSE Leap Micro 5.3 kernel-rt 5.14.21-150400.15.46.1 SUSE-SU-2023:3318-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.1.41-63.109 1.0-0.amzn2023 ALAS2023-2023-299
Amazon Linux 2023 perf +12 6.1.41-63.109.amzn2023 ALAS2023-2023-299
Amazon Linux 2 kernel-livepatch-4.14.320-243.544 1.0-0.amzn2 ALAS2-2023-2179
Amazon Linux 2 perf +8 4.14.320-243.544.amzn2 ALAS2-2023-2179

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) kernel 5.15.122.1-2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 bpftool 7.0.0-284.30.0.1.el9_2 ELSA-2023-5069
Oracle Linux 9 perf +25 5.14.0-284.30.0.1.el9_2 ELSA-2023-5069
Oracle Linux 8 perf +19 4.18.0-477.27.0.1.el8_8 ELSA-2023-5244
Oracle Linux 7 kernel-uek +5 4.1.12-124.79.2.el7uek ELSA-2023-12842
Oracle Linux 7 perf +12 3.10.0-1160.105.1.0.1.el7 ELSA-2023-7423

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 50

References