In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modulesUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matched | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-livepatch-5.10.167-147.601Upgrade perfUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.110-70.143Upgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.178-162.673-debuginfo | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kernelUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfo | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-core | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-alUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dtb-zteUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-preemptUpgrade kernel-azureUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuild | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1157-awsUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-oemUpgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.17.0-1032-oemUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-73-genericUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.4.0-241-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-6.0.0-1017-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-6.1.0-1013-oemUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-150-genericUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1157-awsUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1019-raspi | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub