An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Jun 21, 2023 | May 21, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 30, 2023 | May 21, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 21, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Aug 9, 2023 | May 21, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 30, 2023 | May 21, 2023 |
| Suse | — | Upgrade dtb-zteUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-alUpgrade reiserfs-kmp-defaultUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kb | Aug 9, 2024 | May 21, 2023 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-lts-xenialUpgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-snapdragonUpgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux-dell300xUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-raspi2Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gkeUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-aws-fips | Nov 19, 2024 | May 21, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub