net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules | Aug 8, 2022 | Jun 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.126-117.518Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.285-215.501Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.15.50-23.125Upgrade python-perf-debuginfoUpgrade kernel-tools | Sep 30, 2022 | Jun 2, 2022 |
| Amazon_linux | — | Upgrade kernel | Jul 8, 2022 | Jun 2, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf | Feb 17, 2025 | May 31, 2022 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_62_1-debuginfoUpgrade kpatch-patch-4_18_0-372_13_1Upgrade kernel-rtUpgrade kpatch-patch-5_14_0-70_13_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_66_1Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_66_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_53_1Upgrade kpatch-patch-4_18_0-372_13_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-4_18_0-372_9_1Upgrade kpatch-patch-4_18_0-372_13_1-debuginfoUpgrade kpatch-patch-4_18_0-372_16_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_49_1Upgrade kpatch-patch-4_18_0-372_16_1Upgrade kpatch-patch-3_10_0-1160_62_1Upgrade kpatch-patch-4_18_0-372_9_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_59_1Upgrade kpatch-patch-4_18_0-372_9_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_53_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_49_1-debuginfoUpgrade kpatch-patch-5_14_0-70_13_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_59_1-debuginfoUpgrade kpatch-patch-4_18_0-372_16_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_45_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-5_14_0-70_13_1-debugsource | Jul 14, 2022 | Jun 2, 2022 |
| Debian | — | Upgrade linux | Jul 4, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-headers | Aug 18, 2022 | Jun 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 14, 2022 | Jun 2, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 3, 2022 | May 31, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 14, 2022 | Jun 2, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernelUpgrade python3-perfUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools | Aug 16, 2022 | Jun 2, 2022 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dtb-zteUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-preempt-optionalUpgrade kernel-preempt-livepatch-develUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade gfs2-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade dtb-alUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade ocfs2-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preemptUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-devel | Oct 26, 2022 | Jun 2, 2022 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-gcpUpgrade linux-raspi2Upgrade linux-dell300xUpgrade linux-hwe-5.13Upgrade linux-intel-5.13Upgrade linux-oem-5.17Upgrade linux-oracle-5.4Upgrade linux-gcp-5.13Upgrade linux-oracle-5.15Upgrade linux-gkeop-5.4Upgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-gke-5.4Upgrade linux-gcp-5.15Upgrade linux-awsUpgrade linux-oem-5.14Upgrade linux-oracle-5.13Upgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-riscvUpgrade linux-hweUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-azure-5.13Upgrade linux-lts-xenialUpgrade linux-azure-fdeUpgrade linux-aws-fipsUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-snapdragonUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-lowlatencyUpgrade linux-aws-5.13Upgrade linux-azure-fips | Nov 19, 2024 | Jun 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub