In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debugUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extra | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-develUpgrade kernel-livepatch-5.15.110-70.143Upgrade bpftoolUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.178-162.673Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.21-1.45Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade python3-perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.15-28.43 | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1 | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-core | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-zteUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-debug-vdso | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-4.4.0-1157-awsUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-aws-hweUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.19.0-1027-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-241-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-43-genericUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-6.0.0-1017-oemUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-6.1.0-1013-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-5.4.0-150-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1157-awsUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-gcp-lts-20.04 | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub