net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-core | Aug 8, 2022 | Jun 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.126-117.518Upgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.285-215.501Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.50-23.125Upgrade bpftool-debuginfoUpgrade kernel-tools | Sep 30, 2022 | Jun 2, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 8, 2022 | Jun 2, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | May 31, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_66_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-4_18_0-372_13_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_66_1-debuginfoUpgrade kpatch-patch-4_18_0-372_16_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_13_1Upgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-4_18_0-372_13_1-debugsourceUpgrade kpatch-patch-5_14_0-70_13_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kpatch-patch-4_18_0-372_16_1-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-4_18_0-372_16_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1-debuginfo | Jul 14, 2022 | Jun 2, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Sep 14, 2022 | Jun 2, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 3, 2022 | May 31, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 14, 2022 | Jun 2, 2022 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-tools | Aug 16, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-preemptUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debugUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade reiserfs-kmp-preemptUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-develUpgrade dtb-rockchipUpgrade dtb-alUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-zte | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-lts-xenialUpgrade linux-ibmUpgrade linux-snapdragonUpgrade linux-raspiUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-oem-5.14Upgrade linux-oracle-5.13Upgrade linux-azure-5.4Upgrade linux-riscvUpgrade linux-gcp-4.15Upgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-azure-4.15Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gke-5.4Upgrade linux-lowlatencyUpgrade linux-iotUpgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-azure-5.13Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linuxUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-aws-5.13Upgrade linux-aws-5.4Upgrade linux-raspi2Upgrade linux-dell300xUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-gcp-fipsUpgrade linux-gcp-5.13Upgrade linux-oracle-5.4Upgrade linux-gkeop-5.4Upgrade linux-hwe-5.13Upgrade linux-azure-5.15Upgrade linux-intel-5.13Upgrade linux-oracle-5.15Upgrade linux-oem-5.17Upgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-gcp-5.4 | Nov 19, 2024 | Jun 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub