A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-devel | Sep 21, 2023 | Aug 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Aug 12, 2023 |
| Debian | — | Upgrade linux | Oct 19, 2023 | Aug 28, 2023 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-amazonUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-debug-vdso | Sep 15, 2023 | Aug 28, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1012-awsUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-33-generic-64kUpgrade linux-image-6.2.0-1012-azureUpgrade linux-image-5.15.0-1033-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1038-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1045-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1038-ibmUpgrade linux-image-5.15.0-1042-gcpUpgrade linux-image-6.2.0-1014-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-84-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1044-oracleUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1012-oracleUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-5.15.0-84-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1033-nvidiaUpgrade linux-image-6.2.0-33-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1042-gkeUpgrade linux-image-intelUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1013-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-1042-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1005-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-33-genericUpgrade linux-image-6.2.0-1013-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-6.1.0-1022-oemUpgrade linux-image-5.15.0-1028-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-84-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1010-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1047-azureUpgrade linux-image-oracleUpgrade linux-image-5.15.0-84-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1013-kvmUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-6.2.0-1013-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1047-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-84-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1012-azure-fde | Sep 20, 2023 | Aug 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub