Overview
About vulnerability
A flaw in the Linux kernel’s implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to listen on a high port allowing for a list element to be used after free. Given the ability to execute code, a local attacker could leverage this use-after-free to crash the system or possibly escalate privileges on the system.Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , Ubuntu 16.04 ELS
- Affected packages:
- kernel @ 3.10.0 (+14 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 8 | Released |
6 kernels
|
| CentOS 7 | Released |
100 kernels
|
| CentOS 7 plus | Released |
98 kernels
|
| CentOS 8 | Released |
3 kernels
|
| CloudLinux OS 6h | Released |
93 kernels
|
| CloudLinux OS 7 | Released |
104 kernels
|
| CloudLinux OS 7h | Released |
7 kernels
|
| CloudLinux OS 8 | Released |
5 kernels
|
| Debian 11 | Released |
2 kernels
|
| Endurance 7 eig 3.10 | Released |
2 kernels
|
| Oracle Linux 7 | Released |
112 kernels
|
| Oracle Linux 8 | Released |
5 kernels
|
| RHEL 7 | Released |
100 kernels
|
| RHEL 8 | Released |
7 kernels
|
| RHEL8 EUS 8.4 | Released |
1 kernel
|
| Rocky Linux 8 | Released |
4 kernels
|
| Ubuntu 16.04 | Released |
2 kernels
|
| Ubuntu 20.04 AWS Hirsute | Will Not Fix | — |