Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-core | Sep 15, 2023 | Jul 5, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.184-175.749Upgrade kernel-livepatch-5.15.120-74.144Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | Jul 21, 2023 | Jul 5, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-devel | Feb 17, 2025 | Jul 5, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kernelUpgrade kpatch-patch-5_14_0-284_11_1-debugsource | Sep 13, 2023 | Jul 5, 2023 |
| Debian | — | Upgrade linux | Jul 24, 2023 | Jul 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jan 10, 2024 | Jul 5, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jul 5, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 13, 2023 | Jul 5, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extra | Mar 5, 2024 | Jul 5, 2023 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade dtb-zteUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade reiserfs-kmp-rt | Aug 4, 2023 | Jul 5, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.17.0-1035-oemUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-azureUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.0.0-1020-oemUpgrade linux-image-lowlatency-64k-hwe-20.04 | Jul 26, 2023 | Jul 5, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub