A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-develUpgrade perfUpgrade libperfUpgrade kernel-64kUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-64k-devel | Apr 11, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.336-256.559Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.148-97.161Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.209-198.858Upgrade python-perf-debuginfo | Feb 21, 2024 | Jan 31, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 19, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.72-96.166Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.77-99.164Upgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-common | Feb 17, 2025 | Jan 31, 2024 |
| Centos_linux | — | Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_105_1Upgrade kpatch-patch-3_10_0-1160_105_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_108_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_108_1 | Mar 13, 2024 | Jan 31, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | May 13, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 3, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | May 31, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel | Jul 23, 2024 | Jan 31, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Apr 9, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 21, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Feb 22, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extra | Apr 8, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-preemptUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dtb-sprd | Feb 15, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1018-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1053-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-174-genericUpgrade linux-image-5.4.0-1081-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-101-genericUpgrade linux-image-4.15.0-1150-kvmUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1013-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-223-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1175-azureUpgrade linux-image-5.15.0-1049-ibmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1059-azureUpgrade linux-image-4.4.0-252-lowlatencyUpgrade linux-image-4.15.0-1129-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1039-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1047-nvidiaUpgrade linux-image-5.4.0-1105-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-1167-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-26-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1019-oracle-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1160-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1017-azureUpgrade linux-image-5.15.0-101-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1047-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.5.0-1019-oracleUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1049-raspiUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1088-gkeopUpgrade linux-image-5.4.0-1120-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-1012-laptopUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-4.4.0-252-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1010-starfiveUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-gkeUpgrade linux-image-6.5.0-1017-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1121-awsUpgrade linux-image-5.15.0-1059-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-174-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-174-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-26-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-223-genericUpgrade linux-image-5.4.0-1125-gcpUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-26-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1016-awsUpgrade linux-image-4.4.0-1129-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-1130-kvmUpgrade linux-image-5.15.0-1054-gcpUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-5.4.0-1040-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1166-awsUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1016-gcpUpgrade linux-image-5.4.0-1109-kvmUpgrade linux-image-5.15.0-1051-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-101-generic-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-6.5.0-26-lowlatencyUpgrade linux-image-5.15.0-101-generic-lpaeUpgrade linux-image-5.4.0-1068-ibmUpgrade linux-image-5.15.0-1054-oracleUpgrade linux-image-5.4.0-1033-iotUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-101-lowlatency | Mar 12, 2024 | Jan 31, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub