A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debugUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-modules-core | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-4.14.322-244.536Upgrade bpftoolUpgrade kernel-livepatch-5.15.120-74.144Upgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-5_14_0-284_18_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kernelUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsource | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade perf | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-core | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-alUpgrade kernel-preemptUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dtb-zteUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-devel-azure | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.2.0-1008-azureUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1042-azureUpgrade linux-image-4.15.0-1168-azureUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-5.15.0-1040-awsUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.2.0-26-genericUpgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-nvidiaUpgrade linux-image-dell300xUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-5.4.0-1073-gkeopUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-78-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-gke-5.4Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1159-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-4.15.0-214-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-50-genericUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-1121-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-78-generic-64k | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub