A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c.
Mishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.
We recommend upgrading past commit 1240eb93f0616b21c675416516ff3d74798fdc97
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-64kUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matched | Sep 15, 2023 | Jun 28, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-livepatch-5.15.120-74.144Upgrade bpftoolUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfo | Jul 21, 2023 | Jun 28, 2023 |
| Amazon_linux | — | Upgrade kernel | Sep 26, 2023 | Jun 28, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-livepatch-6.1.38-59.109Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jun 8, 2023 |
| Centos_linux | — | Upgrade kpatch-patch-4_18_0-477_10_1Upgrade kpatch-patch-4_18_0-477_21_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1Upgrade kpatch-patch-5_14_0-284_18_1-debugsourceUpgrade kernelUpgrade kpatch-patch-4_18_0-477_13_1Upgrade kpatch-patch-4_18_0-477_21_1-debugsourceUpgrade kpatch-patch-4_18_0-477_15_1Upgrade kpatch-patch-4_18_0-477_15_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debuginfoUpgrade kpatch-patch-5_14_0-284_11_1-debugsourceUpgrade kpatch-patch-4_18_0-477_10_1-debuginfoUpgrade kpatch-patch-5_14_0-284_18_1-debuginfoUpgrade kpatch-patch-5_14_0-284_25_1-debuginfoUpgrade kpatch-patch-4_18_0-477_13_1-debugsourceUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-477_21_1Upgrade kpatch-patch-4_18_0-477_15_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1-debugsourceUpgrade kpatch-patch-5_14_0-284_25_1Upgrade kpatch-patch-4_18_0-477_10_1-debugsourceUpgrade kpatch-patch-5_14_0-284_18_1 | Sep 13, 2023 | Jun 28, 2023 |
| Debian | — | Upgrade linux | Jul 31, 2023 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade python3-perfUpgrade bpftool | Jan 10, 2024 | Jun 28, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 10, 2024 | Jun 28, 2023 |
| Oracle_linux | — | Upgrade kernel | Sep 15, 2023 | Jun 8, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 30, 2023 | Jun 28, 2023 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-core | Mar 5, 2024 | Jun 28, 2023 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade kernel-azureUpgrade dtb-zteUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-alUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kb | Aug 4, 2023 | Jun 28, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1036-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1106-awsUpgrade linux-image-5.15.0-1024-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.2.0-1009-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-78-genericUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-155-generic-lpaeUpgrade linux-image-5.15.0-1038-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1143-kvmUpgrade linux-image-5.4.0-1112-azureUpgrade linux-image-6.2.0-1008-awsUpgrade linux-image-5.19.0-50-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.19.0-50-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1053-ibmUpgrade linux-image-4.15.0-214-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.1.0-1019-oemUpgrade linux-image-5.4.0-1109-gcpUpgrade linux-image-4.15.0-214-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1029-nvidia-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-214-genericUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1026-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1095-kvmUpgrade linux-image-5.4.0-1018-iotUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-4.15.0-1159-awsUpgrade linux-image-5.15.0-78-generic-64kUpgrade linux-image-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1034-ibmUpgrade linux-image-5.15.0-1042-azure-fdeUpgrade linux-image-6.2.0-1009-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-26-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1122-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1105-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1090-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1034-raspi-nolpaeUpgrade linux-image-5.19.0-1030-gcpUpgrade linux-image-5.4.0-155-genericUpgrade linux-image-6.2.0-1008-oracleUpgrade linux-image-5.15.0-1038-kvmUpgrade linux-image-4.15.0-1153-gcpUpgrade linux-image-5.19.0-1029-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1040-awsUpgrade linux-image-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1068-dell300xUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1038-gcpUpgrade linux-image-6.2.0-1009-lowlatencyUpgrade linux-image-6.2.0-1009-lowlatency-64kUpgrade linux-image-5.19.0-50-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1034-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1006-ibmUpgrade linux-image-6.2.0-1010-gcpUpgrade linux-image-genericUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-5.15.0-78-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-6.2.0-26-genericUpgrade linux-image-4.15.0-1153-snapdragonUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1039-oracleUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-78-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-intelUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-6.2.0-1008-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-155-lowlatencyUpgrade linux-image-oemUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1029-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1168-azureUpgrade linux-image-6.2.0-26-generic-lpaeUpgrade linux-image-5.15.0-78-generic-lpaeUpgrade linux-image-5.15.0-1042-azureUpgrade linux-image-5.4.0-1104-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1073-gkeop | Jul 26, 2023 | Jun 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub