In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade kernel-64k-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.15.110-70.143Upgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.176-157.645-debuginfo | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernelUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-tools-debuginfoUpgrade python3-perf | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1 | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-zteUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kselftests-kmp-default | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-genericUpgrade linux-image-4.15.0-1157-awsUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-73-genericUpgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-150-genericUpgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-gkeopUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.19.0-43-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-6.1.0-1013-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1027-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-6.0.0-1017-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1037-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1157-awsUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-oem-20.04 | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub