In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade python3-perfUpgrade kernel-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-64k-modules | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-livepatch-5.15.110-70.143Upgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.179-168.710Upgrade python-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.178-162.673Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-headers | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-livepatch-6.1.15-28.43Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.25-37.47Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade perf-debuginfo | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1 | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade python3-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-symsUpgrade dtb-appleUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dtb-zteUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-preemptUpgrade dtb-alUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azure | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-gkeUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-oemUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-azure-cvmUpgrade linux-image-snapdragonUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1157-awsUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.1.0-1013-oemUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-gcpUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.0.0-1017-oemUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1026-awsUpgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-5.4.0-150-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-oem-22.04aUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1039-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1157-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-intel-iotg | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub