A use-after-free flaw was found in the netfilter subsystem of the Linux kernel. If the catchall element is garbage-collected when the pipapo set is removed, the element can be deactivated twice. This can cause a use-after-free issue on an NFT_CHAIN object or NFT_OBJECT object, allowing a local unprivileged user with CAP_NET_ADMIN capability to escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.145-95.161Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.205-195.807Upgrade bpftool | Jan 23, 2024 | Jan 2, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jan 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 13, 2024 | Jan 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | May 31, 2024 | Jan 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Mar 19, 2024 | Jan 2, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Feb 29, 2024 | Jan 2, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-docs-html | Oct 31, 2024 | Jan 2, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-15-genericUpgrade linux-image-6.5.0-1014-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1049-kvmUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1011-azure-fdeUpgrade linux-image-5.15.0-92-generic-64kUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1015-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-1052-awsUpgrade linux-image-laptop-23.10Upgrade linux-image-6.2.0-1019-azureUpgrade linux-image-5.15.0-92-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-15-generic-64kUpgrade linux-image-6.5.0-1013-oemUpgrade linux-image-5.15.0-1049-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.15.0-92-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1011-gcpUpgrade linux-image-5.15.0-1043-nvidiaUpgrade linux-image-6.2.0-1019-azure-fdeUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1012-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-92-genericUpgrade linux-image-5.15.0-1054-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1011-azureUpgrade linux-image-gkeUpgrade linux-image-6.2.0-1015-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1008-laptopUpgrade linux-image-5.15.0-1049-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1035-gkeopUpgrade linux-image-6.2.0-1021-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-6.1.0-1029-oemUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1006-starfiveUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1009-raspiUpgrade linux-image-6.5.0-15-lowlatencyUpgrade linux-image-6.5.0-15-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1043-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1054-azureUpgrade linux-image-5.15.0-1050-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1045-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-92-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1018-awsUpgrade linux-image-5.15.0-1045-raspi | Jan 26, 2024 | Jan 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub