In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-modules | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.110-70.143Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.21-1.45Upgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-livepatch-6.1.15-28.43 | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfo | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-preemptUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-zteUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dtb-alUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dtb-amazon | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-oemUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-4.4.0-1157-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1109-azureUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-6.0.0-1017-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.1.0-1013-oemUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-150-genericUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1157-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1039-azure | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub