In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade perf | Jun 6, 2023 | May 8, 2023 |
| Alpine Linux | — | Upgrade linux-lts | Aug 22, 2024 | May 8, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.179-166.674-debuginfoUpgrade kernel-livepatch-5.10.167-147.601Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.177-158.645Upgrade python-perfUpgrade kernel-livepatch-5.10.178-162.673-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.167-147.601-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.179-168.710Upgrade kernel-livepatch-5.10.179-166.674Upgrade kernel-livepatch-5.15.110-70.143Upgrade kernel-livepatch-5.10.173-154.642-debuginfoUpgrade kernel-livepatch-5.10.176-157.645-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.177-158.645-debuginfoUpgrade kernel-livepatch-4.14.314-238.539Upgrade kernel-livepatch-5.10.176-157.645Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.10.178-162.673Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfo | Jun 6, 2023 | May 8, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 7, 2023 | May 8, 2023 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-livepatch-6.1.27-43.48Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.25-37.47Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftool | Feb 17, 2025 | May 2, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_88_1Upgrade kpatch-patch-3_10_0-1160_88_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_92_1Upgrade kernelUpgrade kpatch-patch-3_10_0-1160_95_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_90_1Upgrade kpatch-patch-3_10_0-1160_99_1-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_99_1Upgrade kpatch-patch-3_10_0-1160_95_1 | Jun 5, 2023 | May 8, 2023 |
| Debian | — | Upgrade linux | May 15, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Jul 18, 2023 | May 8, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perf | Jan 10, 2024 | May 8, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Aug 9, 2023 | May 8, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 1, 2023 | May 2, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 5, 2023 | May 8, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | May 8, 2023 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-socionextUpgrade dtb-alUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-zteUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-allwinner | Jun 15, 2023 | May 8, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-gke-5.15Upgrade linux-image-6.0.0-1017-oemUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-6.1.0-1013-oemUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-150-genericUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.19.0-43-genericUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1157-awsUpgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-241-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-kvmUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-4.4.0-1119-awsUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.17.0-1032-oemUpgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1017-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-4.4.0-1157-awsUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-lts-xenial | May 31, 2023 | May 8, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub