tcp: restrict SO_ATTACH_FILTER to priv users
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets to users with CAP_NET_ADMIN capability. This blocks potential side-channel attack where an unprivileged application attaches a filter to leak TCP sequence/acknowledgment numbers.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 3747de241a66ef2c7032d2cc2b826a47c5fa0f6a; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in ecfe9171b26ae3eed0cd8bab7a943e9e2c9e51ba; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 82b3e7ce10c53fc12aab8904745603efc74f8c07; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in ede69b8f6670600e534591664584f810d7c385f9; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in c68517a3e18e20997808821c5559d0cba4d776c1; From 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 · fixed in 5d39580f68e6ddeedd15e587282207489dfb3da2
- Linux Linux
2.6.12
- KernelLinux
From 2.6.12 · fixed in 6.1.176; From 6.2.0 · fixed in 6.6.143; From 6.7.0 · fixed in 6.12.94; From 6.13.0 · fixed in 6.18.36; From 6.19.0 · fixed in 7.0.13