A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-modulesUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-devel | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade perfUpgrade kernel | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-headersUpgrade perf-debuginfo | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kernelUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsource | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-alUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-zteUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade gfs2-kmp-azure | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1168-azureUpgrade linux-image-nvidiaUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-ibmUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-78-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.1.0-1019-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04 | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub