net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-modules-extraUpgrade bpftool | Aug 8, 2022 | Jun 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.50-23.125Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.126-117.518Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-4.14.285-215.501Upgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo | Sep 30, 2022 | Jun 2, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 8, 2022 | Jun 2, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-devel | Feb 17, 2025 | May 31, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-372_16_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kpatch-patch-4_18_0-372_16_1Upgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-3_10_0-1160_66_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_13_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-372_13_1-debugsourceUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-4_18_0-372_16_1-debugsourceUpgrade kpatch-patch-4_18_0-372_13_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_66_1 | Jul 14, 2022 | Jun 2, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Sep 14, 2022 | Jun 2, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 3, 2022 | May 31, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 14, 2022 | Jun 2, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfo | Aug 16, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade gfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kselftests-kmp-preemptUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-zteUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-preemptUpgrade dtb-alUpgrade kernel-preempt-optionalUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-preemptUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dtb-alteraUpgrade reiserfs-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade dtb-amazon | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linuxUpgrade linux-aws-hweUpgrade linux-ibm-5.4Upgrade linux-realtimeUpgrade linux-oem-5.14Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-riscvUpgrade linux-gke-5.4Upgrade linux-aws-5.13Upgrade linux-azure-5.13Upgrade linux-azure-fdeUpgrade linux-hweUpgrade linux-lowlatency-hwe-5.15Upgrade linux-lts-xenialUpgrade linux-hwe-5.4Upgrade linux-oracle-5.13Upgrade linux-iotUpgrade linux-ibmUpgrade linux-snapdragonUpgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-oem-5.17Upgrade linux-gcp-5.13Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-hwe-5.13Upgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-bluefieldUpgrade linux-gkeop-5.4Upgrade linux-oracle-5.4Upgrade linux-intel-5.13Upgrade linux-raspi2Upgrade linux-dell300xUpgrade linux-fipsUpgrade linux-kvm | Nov 19, 2024 | Jun 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub