A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-64k-debug-devel | Sep 15, 2023 | Jul 31, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.186-179.751Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.186-179.751-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.128-80.144 | Sep 7, 2023 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 19, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kernelUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debuginfo | Sep 13, 2023 | Jul 31, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Jul 31, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jul 31, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 19, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 31, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extra | Mar 5, 2024 | Jul 31, 2023 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-alUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-zteUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-source-vanilla | Aug 15, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1040-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1011-kvmUpgrade linux-image-5.15.0-1040-gkeUpgrade linux-image-5.15.0-1036-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1011-raspiUpgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-82-generic-64kUpgrade linux-image-5.15.0-82-lowlatencyUpgrade linux-image-6.2.0-1012-gcpUpgrade linux-image-6.2.0-1011-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1010-oracleUpgrade linux-image-5.15.0-1038-intel-iotgUpgrade linux-image-6.2.0-1010-awsUpgrade linux-image-6.2.0-31-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1045-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-31-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1026-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1031-nvidiaUpgrade linux-image-6.1.0-1020-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1036-raspiUpgrade linux-image-5.15.0-1043-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1003-starfiveUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-31-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1073-bluefieldUpgrade linux-image-5.15.0-82-generic-lpaeUpgrade linux-image-5.15.0-82-lowlatency-64kUpgrade linux-image-5.15.0-1041-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1045-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.2.0-1010-azureUpgrade linux-image-5.15.0-82-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.2.0-1011-lowlatency-64kUpgrade linux-image-6.2.0-1008-ibmUpgrade linux-image-5.15.0-1031-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04 | Aug 31, 2023 | Jul 31, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub