In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-devel | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.178-162.673Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-livepatch-4.14.314-238.539Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade kernel-livepatch-5.10.167-147.601Upgrade bpftoolUpgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.15.110-70.143Upgrade kernel-livepatch-5.10.179-166.674 | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.15-28.43Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-47.49Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade perf | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_95_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_92_1Upgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_92_1-debuginfo | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade python3-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-renesasUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-zteUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azure | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-4.4.0-1157-awsUpgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1109-azureUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-awsUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-4.15.0-1157-awsUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.1.0-1013-oemUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-212-genericUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.0.0-1017-oemUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-5.4.0-150-genericUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-1006-kvm | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub