A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade rtlaUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-core | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headers | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perf | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kernelUpgrade kpatch-patch-4_18_0-477_21_1-debuginfo | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade perf | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-kvm | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-amazonUpgrade dtb-alUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kb | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1112-azureUpgrade linux-image-oem-osp1Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-generic-64kUpgrade linux-image-snapdragonUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-243-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-dell300xUpgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-oem-22.04c | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub