A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The function nft_pipapo_walk did not skip inactive elements during set walk which could lead double deactivations of PIPAPO (Pile Packet Policies) elements, leading to use-after-free.
We recommend upgrading past commit 317eb9685095678f2c9f5a8189de698c5354316a.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extra | Feb 23, 2024 | Dec 18, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-5.15.145-94.156Upgrade python-perfUpgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.201-191.748-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.205-194.804Upgrade kernel-livepatch-5.10.201-191.748Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jan 10, 2024 | Dec 18, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perf-debuginfo | Feb 17, 2025 | Dec 18, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Dec 18, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Mar 13, 2024 | Dec 18, 2023 |
| Oracle_linux | — | Upgrade kernel | Feb 23, 2024 | Dec 18, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Feb 8, 2024 | Dec 18, 2023 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-vdso | Mar 13, 2024 | Dec 18, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.2Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-92-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-5.15.0-1054-azureUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-6.1.0-1029-oemUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.2.0-1019-azureUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1013-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1011-azureUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.5.0-1012-awsUpgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1052-awsUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-5.15.0-1045-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1047-intel-iotg | Jan 26, 2024 | Dec 18, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 18, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub