A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-64k-debug-modules | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade python-perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.120-74.144Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-headers | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.38-59.109Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1 | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headers | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-core | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade dtb-alUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade dtb-zteUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade cluster-md-kmp-default | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-hweUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1159-awsUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1029-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-azureUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-dell300xUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1018-iotUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.0.0-1021-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1112-azureUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-aws | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub