A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-64kUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-devel-matched | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.192-182.736Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-headers | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.38-59.109Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-libbpf-devel | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1 | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-core | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-zteUpgrade kernel-default-vdsoUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-apm | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-155-genericUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-hweUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-dell300xUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-gcpUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1112-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04 | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub